Blacklist more kernel modules to reduce attack surface

[raja]

Update presentation of `/etc/modprobe.d/*`

This is a follow-up to the previous PR with a few more minor change that I think would be good.

Once again, there are no changes to the functionality of the code.

After this I will (hopefully) be submitting new additions for review.

@Patrick

If you wish to refactor further, it would be good to avoid having a separate script per disabled module. Would be better to have 1 slightly more complex script and create symlinks using debian/security-misc.links instead.

The script would figure out it’s own name using $0 or $BASH_SOURCE. (Did not check which one works with symlinks.)

That is a great idea!

I will work on that as an entirely separate PR once I am done submitting my current batch of changes.