Kicksecure / security-misc

Kernel Hardening; Protect Linux User Accounts against Brute Force Attacks; Improve Entropy Collection; Strong Linux User Account Separation; Enhances Misc Security Settings - https://www.kicksecure.com/wiki/Security-misc
https://www.kicksecure.com/wiki/Impressum
Other
517 stars 51 forks source link

kernel module blacklist breaks VirtualBox audio devices ICH AC97 and maybe Intel HD #271

Closed adrelanos closed 2 months ago

adrelanos commented 2 months ago

Due to complex audio issues, we cannot blacklist the kernel modules required for VirtualBox ICH AC97 audio device just yet.

Kicksecure

ICH AC97:

ac97_bus
joydev
snd_ac97_codec
snd_intel8x0
snd_pcm

Intel HD:

joydev

This has been found out using Compare Loaded Kernel Modules.

Breaking means there is no audio at all in case of ICH AC97.

Intel HD works without the joydev kernel module, I am not sure yet it is important or better to keep it blacklisted.

Therefore some kernel modules need to be removed from the blacklist.