[SOLVED] Question loading Kernel Modules.

ccj4467 · 03-18-2021, 04:43 PM

I have an interesting dilemma. In order to meet certain security requirements I need to blacklist and unload the kernel module for USB storage. Unfortunately sometimes we need to get a file from a USB device.

Is it possible manually load the blacklisted kernel module and then mount the USB device.

syg00 · 03-18-2021, 04:56 PM

Sure.
After blacklisting you shouldn't need to unload - to me that implies a udev is probably firing. In which case anybody inserting a USB will automatically load it. There was a recent thread that mentioned tool(s) that might help.

Later: have a look at this thread. usbguard seems to be the suggestion.

Emerson · 03-18-2021, 04:56 PM

What stops you from trying? I often read posts like this and wonder, why has someone else to try out and reply. To my knowledge blacklisting only disables autoloading, not manual load.

ccj4467 · 03-19-2021, 06:39 AM

Thanks everybody, I will take a look at usbguard. I have come up with a rather inelegant solution with a shell script. Basically to enable usb storage I rename the blacklist config file do a modprobe to load the module. Disabling is the reverse. The only problem is we also have to disable automounting so we have to manually mount the usb device, not really ideal but doable.

I am marking this thread solved