Split workstation & server whitelist

Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2024-06-03 16:05:25 -07:00
parent 3858ff7e44
commit 4a8fcc434d
No known key found for this signature in database
GPG Key ID: 555C902A34EC968F
10 changed files with 135 additions and 46 deletions

View File

@ -301,6 +301,7 @@ install analogix-anx78xx /bin/false
install analogix_dp /bin/false
install anx7411 /bin/false
install aoe /bin/false
install apanel /bin/false
install apds9300 /bin/false
install apds9802als /bin/false
install apds990x /bin/false
@ -1505,6 +1506,7 @@ install hid-multitouch /bin/false
install hid-nintendo /bin/false
install hid-nti /bin/false
install hid-ntrig /bin/false
install hid-nvidia-shield /bin/false
install hid-ortek /bin/false
install hidp /bin/false
install hid-penmount /bin/false
@ -1533,6 +1535,7 @@ install hid-roccat-pyra /bin/false
install hid-roccat-ryos /bin/false
install hid-roccat-savu /bin/false
install hid-saitek /bin/false
install hid-samsung /bin/false
install hid-semitek /bin/false
install hid-sensor-accel-3d /bin/false
install hid-sensor-als /bin/false
@ -1550,6 +1553,7 @@ install hid-sensor-temperature /bin/false
install hid-sensor-trigger /bin/false
install hid-sigmamicro /bin/false
install hid-sjoy /bin/false
install hid-sony /bin/false
install hid-speedlink /bin/false
install hid-steam /bin/false
install hid-steelseries /bin/false
@ -1645,6 +1649,7 @@ install i2c-mux-pca954x /bin/false
install i2c-mux-reg /bin/false
install i2c-nforce2 /bin/false
install i2c-nforce2-s4985 /bin/false
install i2c-nvidia-gpu /bin/false
install i2c-ocores /bin/false
install i2c-parport /bin/false
install i2c-pca-platform /bin/false
@ -1691,6 +1696,7 @@ install ibmaem /bin/false
install ibmasm /bin/false
install ibmasr /bin/false
install ibm-cffps /bin/false
install ibm-panel /bin/false
install ibmpex /bin/false
install ibm_rtl /bin/false
install ib_mthca /bin/false
@ -1703,6 +1709,8 @@ install ice /bin/false
install icp10100 /bin/false
install icplus /bin/false
install ics932s401 /bin/false
install ideapad-laptop /bin/false
install ideapad_slidebar /bin/false
install idma64 /bin/false
install idmouse /bin/false
install idpf /bin/false
@ -1903,6 +1911,7 @@ install ir-rcmm-decoder /bin/false
install ir-sanyo-decoder /bin/false
install irsd200 /bin/false
install ir-sharp-decoder /bin/false
install ir-sony-decoder /bin/false
install ir_toy /bin/false
install ir-usb /bin/false
install ir-xmp-decoder /bin/false
@ -1949,6 +1958,12 @@ install ivtv /bin/false
install ivtv-alsa /bin/false
install iw_cm /bin/false
install iw_cxgb4 /bin/false
install iwl3945 /bin/false
install iwl4965 /bin/false
install iwldvm /bin/false
install iwlegacy /bin/false
install iwlmvm /bin/false
install iwlwifi /bin/false
install ix2505v /bin/false
install ixgbe /bin/false
install ixgbevf /bin/false
@ -2847,6 +2862,7 @@ install ntb_transport /bin/false
install ntc_thermistor /bin/false
install null_blk /bin/false
install nuvoton-cir /bin/false
install nvidia-wmi-ec-backlight /bin/false
install nvram /bin/false
install nvsw-sn2201 /bin/false
install nv_tco /bin/false
@ -2941,6 +2957,12 @@ install palmas-pwrbutton /bin/false
install palmas-regulator /bin/false
install panasonic-laptop /bin/false
install pandora_bl /bin/false
install panel-auo-a030jtn01 /bin/false
install panel-ilitek-ili9341 /bin/false
install panel-mipi-dbi /bin/false
install panel-orisetech-ota5601a /bin/false
install panel-raspberrypi-touchscreen /bin/false
install panel-widechips-ws2401 /bin/false
install parkbd /bin/false
install parport /bin/false
install parport_cs /bin/false
@ -3709,6 +3731,10 @@ install saa7164 /bin/false
install saa717x /bin/false
install saa7706h /bin/false
install safe_serial /bin/false
install samsung-keypad /bin/false
install samsung-laptop /bin/false
install samsung-q10 /bin/false
install samsung-sxgbe /bin/false
install sb1000 /bin/false
install sbc60xxwdt /bin/false
install sbc_epx_c3 /bin/false
@ -4456,6 +4482,8 @@ install softing /bin/false
install softing_cs /bin/false
install solo6x10 /bin/false
install solos-pci /bin/false
install sony-btf-mpx /bin/false
install sony-laptop /bin/false
install soundwire-bus /bin/false
install soundwire-cadence /bin/false
install soundwire-generic-allocation /bin/false
@ -4806,6 +4834,9 @@ install tmp421 /bin/false
install tmp464 /bin/false
install tmp513 /bin/false
install topstar-laptop /bin/false
install toshiba_bluetooth /bin/false
install toshiba_haps /bin/false
install toshiba-wmi /bin/false
install toshsd /bin/false
install touchit213 /bin/false
install touchright /bin/false
@ -4917,6 +4948,7 @@ install twl-regulator /bin/false
install txgbe /bin/false
install typec /bin/false
install typec_displayport /bin/false
install typec_nvidia /bin/false
install typec_ucsi /bin/false
install typec_wcove /bin/false
install typhoon /bin/false

View File

@ -393,6 +393,7 @@ install anybuss_core /bin/false
install ao-cec /bin/false
install ao-cec-g12a /bin/false
install aoe /bin/false
install apanel /bin/false
install apbps2 /bin/false
install apcs-msm8916 /bin/false
install apcs-msm8996 /bin/false
@ -400,21 +401,6 @@ install apds9300 /bin/false
install apds9802als /bin/false
install apds990x /bin/false
install apds9960 /bin/false
install apple-admac /bin/false
install apple_bl /bin/false
install apple-dart /bin/false
install appledisplay /bin/false
install apple-gmux /bin/false
install apple-mailbox /bin/false
install apple-mfi-fastcharge /bin/false
install apple-rtkit /bin/false
install apple-sart /bin/false
install applesmc /bin/false
install apple-soc-cpufreq /bin/false
install applespi /bin/false
install appletalk /bin/false
install appletouch /bin/false
install apple_wdt /bin/false
install applicom /bin/false
install apr /bin/false
install apss-ipq6018 /bin/false
@ -662,8 +648,6 @@ install block2mtd /bin/false
install blocklayoutdriver /bin/false
install bluecard_cs /bin/false
install bluefield_edac /bin/false
install bluetooth /bin/false
install bluetooth_6lowpan /bin/false
install bma150 /bin/false
install bma180 /bin/false
install bma220_spi /bin/false
@ -755,7 +739,6 @@ install btrsi /bin/false
install btrtl /bin/false
install btsdio /bin/false
install bttv /bin/false
install btusb /bin/false
install bu21013_ts /bin/false
install bu21029_ts /bin/false
install budget /bin/false
@ -900,7 +883,6 @@ install cirrus /bin/false
install cirrusfb /bin/false
install classmate-laptop /bin/false
install clip /bin/false
install clk-apple-nco /bin/false
install clk-axi-clkgen /bin/false
install clk-bcm2711-dvp /bin/false
install clk-bd718x7 /bin/false
@ -2225,8 +2207,6 @@ install hid /bin/false
install hid-a4tech /bin/false
install hid-accutouch /bin/false
install hid-alps /bin/false
install hid-apple /bin/false
install hid-appleir /bin/false
install hid-asus /bin/false
install hid-aureal /bin/false
install hid-axff /bin/false
@ -2455,7 +2435,6 @@ install i2c-ali1535 /bin/false
install i2c-ali1563 /bin/false
install i2c-ali15x3 /bin/false
install i2c-altera /bin/false
install i2c-apple /bin/false
install i2c-arb-gpio-challenge /bin/false
install i2c-atr /bin/false
install i2c-bcm2835 /bin/false
@ -2577,6 +2556,7 @@ install ibmaem /bin/false
install ibmasm /bin/false
install ibmasr /bin/false
install ibm-cffps /bin/false
install ibm-panel /bin/false
install ibmpex /bin/false
install ibm_rtl /bin/false
install ib_mthca /bin/false
@ -4257,6 +4237,80 @@ install palmas-pwrbutton /bin/false
install palmas-regulator /bin/false
install panasonic-laptop /bin/false
install pandora_bl /bin/false
install panel /bin/false
install panel-abt-y030xx067a /bin/false
install panel-arm-versatile /bin/false
install panel-asus-z00t-tm5p5-n35596 /bin/false
install panel-auo-a030jtn01 /bin/false
install panel-boe-bf060y8m-aj0 /bin/false
install panel-boe-himax8279d /bin/false
install panel-boe-tv101wum-nl6 /bin/false
install panel-dsi-cm /bin/false
install panel-ebbg-ft8719 /bin/false
install panel-edp /bin/false
install panel-elida-kd35t133 /bin/false
install panel-feixin-k101-im2ba02 /bin/false
install panel-feiyang-fy07024di26a30d /bin/false
install panel-himax-hx8394 /bin/false
install panel-ilitek-ili9322 /bin/false
install panel-ilitek-ili9341 /bin/false
install panel-ilitek-ili9881c /bin/false
install panel-ilitek-ili9882t /bin/false
install panel-innolux-ej030na /bin/false
install panel-innolux-p079zca /bin/false
install panel-jadard-jd9365da-h3 /bin/false
install panel-jdi-fhd-r63452 /bin/false
install panel-jdi-lpm102a188a /bin/false
install panel-jdi-lt070me05000 /bin/false
install panel-khadas-ts050 /bin/false
install panel-kingdisplay-kd097d04 /bin/false
install panel-leadtek-ltk050h3146w /bin/false
install panel-leadtek-ltk500hd1829 /bin/false
install panel-lg-lb035q02 /bin/false
install panel-lg-lg4573 /bin/false
install panel-lvds /bin/false
install panel-magnachip-d53e6ea8966 /bin/false
install panel-mantix-mlaf057we51 /bin/false
install panel-mipi-dbi /bin/false
install panel-nec-nl8048hl11 /bin/false
install panel-newvision-nv3051d /bin/false
install panel-newvision-nv3052c /bin/false
install panel-novatek-nt35510 /bin/false
install panel-novatek-nt35560 /bin/false
install panel-novatek-nt35950 /bin/false
install panel-novatek-nt36523 /bin/false
install panel-novatek-nt36672a /bin/false
install panel-novatek-nt39016 /bin/false
install panel-olimex-lcd-olinuxino /bin/false
install panel-orisetech-ota5601a /bin/false
install panel-orisetech-otm8009a /bin/false
install panel-osd-osd101t2587-53ts /bin/false
install panel-panasonic-vvx10f034n00 /bin/false
install panel-raspberrypi-touchscreen /bin/false
install panel-raydium-rm67191 /bin/false
install panel-raydium-rm68200 /bin/false
install panel-raydium-rm692e5 /bin/false
install panel-ronbo-rb070d30 /bin/false
install panel-seiko-43wvf1g /bin/false
install panel-sharp-lq101r1sx01 /bin/false
install panel-sharp-ls037v7dw01 /bin/false
install panel-sharp-ls043t1le01 /bin/false
install panel-sharp-ls060t1sx01 /bin/false
install panel-simple /bin/false
install panel-sitronix-st7701 /bin/false
install panel-sitronix-st7703 /bin/false
install panel-sitronix-st7789v /bin/false
install panel-startek-kd070fhfid015 /bin/false
install panel-tdo-tl070wsh30 /bin/false
install panel-tpo-td028ttec1 /bin/false
install panel-tpo-td043mtea1 /bin/false
install panel-tpo-tpg110 /bin/false
install panel-truly-nt35597 /bin/false
install panel-visionox-r66451 /bin/false
install panel-visionox-rm69299 /bin/false
install panel-visionox-vtdr6130 /bin/false
install panel-widechips-ws2401 /bin/false
install panel-xinpeng-xpp055c272 /bin/false
install panfrost /bin/false
install parade-ps8622 /bin/false
install parade-ps8640 /bin/false
@ -4331,7 +4385,6 @@ install pcf8591 /bin/false
install pch_udc /bin/false
install pci /bin/false
install pci200syn /bin/false
install pcie-apple /bin/false
install pcie-mediatek-gen3 /bin/false
install pci_endpoint_test /bin/false
install pci-epf-mhi /bin/false
@ -4495,7 +4548,6 @@ install pi3usb30532 /bin/false
install pi433 /bin/false
install pim4328 /bin/false
install pinctrl-alderlake /bin/false
install pinctrl-apple-gpio /bin/false
install pinctrl-axp209 /bin/false
install pinctrl-broxton /bin/false
install pinctrl-cannonlake /bin/false
@ -4699,7 +4751,6 @@ install pvcalls-back /bin/false
install pvcalls-front /bin/false
install pvrusb2 /bin/false
install pwc /bin/false
install pwm-apple /bin/false
install pwm-atmel-hlcdc /bin/false
install pwm-atmel-tcb /bin/false
install pwm-bcm2835 /bin/false
@ -5239,6 +5290,7 @@ install rotary_encoder /bin/false
install rp2 /bin/false
install rpcrdma /bin/false
install rpcsec_gss_krb5 /bin/false
install rpi-panel-attiny-regulator /bin/false
install rpm_master_stats /bin/false
install rpmpd /bin/false
install rpm-proc /bin/false
@ -6007,7 +6059,6 @@ install snd-soc-ak5386 /bin/false
install snd-soc-ak5558 /bin/false
install snd-soc-alc5623 /bin/false
install snd-soc-alc5632 /bin/false
install snd-soc-apple-mca /bin/false
install snd-soc-apq8016-sbc /bin/false
install snd-soc-apq8096 /bin/false
install snd-soc-arizona /bin/false

View File

@ -74,11 +74,11 @@ done < kmod-whitelist-all
if [ "${dataset}" != 'vps' ]; then
while read -r KMOD; do
sed -i "s/^${KMOD}.*//gm" blacklist.txt
done < kmod-whitelist-hw-vendors-start
done < kmod-whitelist-bare-metal-start
while read -r KMOD; do
sed -i "s/.*${KMOD}.*//gm" blacklist.txt
done < kmod-whitelist-hw-vendors-all
done < kmod-whitelist-bare-metal-all
fi
# Apply whitelist for workstation
@ -95,6 +95,11 @@ fi
# Delete empty lines
sed -i '/^$/d' blacklist.txt
# Reapply blacklists that got removed by the whitelist section
while read -r KMOD; do
echo "${KMOD}" >> blacklist.txt
done < kmod-blacklist-reapply
# Delete old files
rm -f etc/modprobe.d/"${dataset}"-blacklist.conf

0
kmod-blacklist-reapply Normal file
View File

View File

@ -0,0 +1,4 @@
acpi
amd
intel
panel

View File

@ -0,0 +1,2 @@
dell-
dell_

View File

@ -1,8 +0,0 @@
acpi
amd
intel
nvidia
panel
samsung
sony
wmi

View File

@ -1,8 +0,0 @@
dell-
dell_
iwl
lg_laptop
ideapad
toshiba
thinkpad
system76

View File

@ -1 +1,6 @@
apple
bluetooth
nvidia
samsung
sony
wmi

View File

@ -1 +1,7 @@
btusb
iwl
lg_laptop
ideapad
toshiba
thinkpad
system76