Kernel Hardening - security-misc

[raja]

Blacklist more kernel modules to reduce attack surface

Now that the framebuffer drivers have also been blacklisted for 2 years with no one complaining, show we disable them as well? ## Framebuffer Drivers: ## Known to be buggy, cause kernel panics, and are generally only used by legacy devices. ## These were all previously blacklisted. ## ## https://git.launchpad.net/ubuntu/+source/kmod/tree/debian/modprobe.d/blacklist-framebuffer.conf?h=ubuntu/disco ## install aty128fb /usr/bin/disabled-framebuffer-by-security-misc install atyfb /usr/bin/disabled-…

EDIT: Move post to a more appropriate location.