# Arcline OS — disabled kernel modules
# Modules that add attack surface without being needed on the base system.
# The workstation edition keeps most of these disabled too; hardware you
# actually use can be re-enabled per-module.

# exotic / historically-risky network protocols
blacklist sctp
blacklist dccp
blacklist rds
blacklist tipc

# unneeded legacy filesystems (mountable by a user with local access)
install cramfs /bin/false
install freevxfs /bin/false
install jffs2 /bin/false
install hfs /bin/false
install hfsplus /bin/false
install udf /bin/false