Blacklist more kernel modules to reduce attack surface

[Patrick]

@Algernon

Modprobing stuff would be one of the options for a kernel exploit. Certainly not the only one but at least one options less for the attacker.

Edit: We also have apparmor which limits what a user, including root, can do.

Larger discussion. Created Untrusted Root - improve Security by Restricting Root for it.