Kernel Hardening - security-misc

Patrick · September 14, 2024, 2:10am

VirtualBox ICH AC97 audio device broken due to kernel module blacklisting:

kernel module blacklist breaks VirtualBox audio devices ICH AC97 and maybe Intel HD

opened 02:09AM - 14 Sep 24 UTC

Due to [complex audio issues](https://www.kicksecure.com/wiki/Dev/audio), we can…not blacklist the kernel modules required for VirtualBox ICH AC97 audio device just yet. Kicksecure * stable at time of writing (14 September 2024) version `17.2.0.7` will old security-misc, versus * `17.2.2.6` (unreleased) with new security-misc. `ICH AC97`: ``` ac97_bus joydev snd_ac97_codec snd_intel8x0 snd_pcm ``` `Intel HD`: ``` joydev ``` This has been found out using [Compare Loaded Kernel Modules](https://www.kicksecure.com/wiki/Kernel_module#Compare_Loaded_Kernel_Modules). Breaking means there is no audio at all in case of `ICH AC97`. `Intel HD` works without the `joydev` kernel module, I am not sure yet it is important or better to keep it blacklisted. Therefore some kernel modules need to be removed from the blacklist.