Re: [Tails-dev] Removing or blacklist kernel modules

2014-07-22 Thread Jacob Appelbaum
On 7/21/14, intrigeri intrig...@boum.org wrote: Hi, (Created https://labs.riseup.net/code/issues/7639 to track this all.) Thanks! Jacob Appelbaum wrote (21 Jul 2014 19:54:57 GMT) : On 7/21/14, intrigeri intrig...@boum.org wrote: However, removing modules altogether is no more work than

Re: [Tails-dev] Removing or blacklist kernel modules

2014-07-22 Thread intrigeri
Hi, Jacob Appelbaum wrote (22 Jul 2014 08:34:59 GMT) : On 7/21/14, intrigeri intrig...@boum.org wrote: Jacob Appelbaum wrote (21 Jul 2014 19:54:57 GMT) : Is that true? Isn't blacklisting them as simple as adding a few lines to /etc/modprobe.d/blacklist.conf? Right. Which is not much easier

Re: [Tails-dev] Removing or blacklist kernel modules

2014-07-21 Thread intrigeri
Hi, Jurre van Bergen wrote (11 Jul 2014 15:20:22 GMT) : I feel that it's important to reconsider what we would like to ship in Tails as the more kernel modules we load and/or ship we also increase the attack vector. Fine with me, as there seems to be energy willing to be put into this :) I

Re: [Tails-dev] Removing or blacklist kernel modules

2014-07-21 Thread Jacob Appelbaum
On 7/21/14, intrigeri intrig...@boum.org wrote: Hi, Jurre van Bergen wrote (11 Jul 2014 15:20:22 GMT) : I feel that it's important to reconsider what we would like to ship in Tails as the more kernel modules we load and/or ship we also increase the attack vector. Fine with me, as there

Re: [Tails-dev] Removing or blacklist kernel modules

2014-07-21 Thread intrigeri
Hi, (Created https://labs.riseup.net/code/issues/7639 to track this all.) Jacob Appelbaum wrote (21 Jul 2014 19:54:57 GMT) : On 7/21/14, intrigeri intrig...@boum.org wrote: However, removing modules altogether is no more work than blacklisting them: we can do it either via chroot_local-hooks

[Tails-dev] Removing or blacklist kernel modules

2014-07-11 Thread Jurre van Bergen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, By default Debian ships a beautiful kernel with a ton of features to work outside of the box. With features I mean modules, whether that's support for some really obscure network protocol or bluetooth(random example) drivers. While that comes in

Re: [Tails-dev] Removing or blacklist kernel modules

2014-07-11 Thread David McKinney
On Sat, Jul 12, 2014 at 12:50:22AM +0930, Jurre van Bergen wrote: Hi, By default Debian ships a beautiful kernel with a ton of features to work outside of the box. With features I mean modules, whether that's support for some really obscure network protocol or bluetooth(random example)