Re: [Tails-dev] Removing or blacklist kernel modules

2014-07-22 Thread intrigeri
Hi, Jacob Appelbaum wrote (22 Jul 2014 08:34:59 GMT) : > On 7/21/14, intrigeri wrote: >> Jacob Appelbaum wrote (21 Jul 2014 19:54:57 GMT) : >>> Is that true? Isn't blacklisting them as simple as adding a few lines >>> to /etc/modprobe.d/blacklist.conf? >> >> Right. Which is not much easier than m

Re: [Tails-dev] Removing or blacklist kernel modules

2014-07-22 Thread Jacob Appelbaum
On 7/21/14, intrigeri wrote: > Hi, > > (Created https://labs.riseup.net/code/issues/7639 to track this all.) > Thanks! > Jacob Appelbaum wrote (21 Jul 2014 19:54:57 GMT) : >> On 7/21/14, intrigeri wrote: >>> However, removing modules altogether is no more work than blacklisting >>> them: we can

Re: [Tails-dev] Removing or blacklist kernel modules

2014-07-21 Thread intrigeri
Hi, (Created https://labs.riseup.net/code/issues/7639 to track this all.) Jacob Appelbaum wrote (21 Jul 2014 19:54:57 GMT) : > On 7/21/14, intrigeri wrote: >> However, removing modules altogether is no more work than blacklisting >> them: we can do it either via chroot_local-hooks (and then, reg

Re: [Tails-dev] Removing or blacklist kernel modules

2014-07-21 Thread Jacob Appelbaum
On 7/21/14, intrigeri wrote: > Hi, > > Jurre van Bergen wrote (11 Jul 2014 15:20:22 GMT) : >> I feel that it's important to reconsider what we would like to ship >> in Tails as the more kernel modules we load and/or ship we also >> increase the attack vector. > > Fine with me, as there seems to be

Re: [Tails-dev] Removing or blacklist kernel modules

2014-07-21 Thread intrigeri
Hi, Jurre van Bergen wrote (11 Jul 2014 15:20:22 GMT) : > I feel that it's important to reconsider what we would like to ship > in Tails as the more kernel modules we load and/or ship we also > increase the attack vector. Fine with me, as there seems to be energy willing to be put into this :) >

Re: [Tails-dev] Removing or blacklist kernel modules

2014-07-11 Thread David McKinney
On Sat, Jul 12, 2014 at 12:50:22AM +0930, Jurre van Bergen wrote: > > Hi, > > By default Debian ships a beautiful kernel with a ton of features to > work outside of the box. With features I mean modules, whether that's > support for some really obscure network protocol or bluetooth(random > examp

[Tails-dev] Removing or blacklist kernel modules

2014-07-11 Thread Jurre van Bergen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, By default Debian ships a beautiful kernel with a ton of features to work outside of the box. With features I mean modules, whether that's support for some really obscure network protocol or bluetooth(random example) drivers. While that comes in