I know that ksmbd's recent vulnerabilities aren't really a problem since I have ufw set up. However, it'd really help me sleep better at night if I could just blacklist it, but even /bin/false doesn't work to do so. For reference, blacklisting ntfs3 in this way
did work.
What I tried was to make a new file named blacklist-ksmbd.conf under /etc/modprobe.d with the following contents:
Code: Select all
# Disable ksmbd (rha1117)
blacklist ksmbd
install ksmbd /bin/false
Afterward, I used sudo update-initramfs -u (as well as sudo update-initramfs -d -k $(uname -r) && sudo update-initramfs -c -k $(uname -r) just in case) to rebuild the initrd.
Still, using modprobe ksmbd loads the module. I think it's maybe related to issue here?
https://bbs.archlinux.org/viewtopic.php?id=245878, but I'm hoping there's another workaround inside of "linux" rather than grub.