From 58b1fb6ddcaac2fab8166ebc433bdaaf7bc8919c Mon Sep 17 00:00:00 2001 From: RoyalOughtness <129108030+RoyalOughtness@users.noreply.github.com> Date: Sun, 27 Sep 2026 22:35:22 -0700 Subject: [PATCH 1/4] feat: compile time config parity for existing runtime settings --- copr_script.sh | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/copr_script.sh b/copr_script.sh index 03b91a7..447960c 100644 --- a/copr_script.sh +++ b/copr_script.sh @@ -120,6 +120,10 @@ configs_to_disable=( # (AER) software error injector. CONFIG_PCIEAER_INJECT + # https://cateee.net/lkddb/web-lkddb/ACPI_APEI_EINJ.html + # APEI error injection for debugging + CONFIG_ACPI_APEI_EINJ + # https://www.kernelconfig.io/CONFIG_SCSI_DEBUG # SCSI debugging host and device simulator CONFIG_SCSI_DEBUG @@ -323,6 +327,20 @@ configs_to_disable=( # Various ACPI modification functionality that's already blocked by lockdown CONFIG_EFI_CUSTOM_SSDT_OVERLAYS CONFIG_ACPI_TABLE_UPGRADE + + # Asynchronous Transfer Mode + # https://www.kernelconfig.io/CONFIG_ATM + # Already blocked at runtime: https://github.com/secureblue/secureblue/blob/live/files/system/usr/lib/modprobe.d/secureblue.conf#L26 + CONFIG_ATM + + # Legacy parallel port support + # https://www.kernelconfig.io/CONFIG_PARPORT + # Already blocked at runtime: https://github.com/secureblue/secureblue/blob/live/files/system/usr/lib/modprobe.d/secureblue.conf#L183 + CONFIG_PARPORT + + # Legacy game port support + # https://cateee.net/lkddb/web-lkddb/GAMEPORT.html + # Already blocked at runtime: https://github.com/secureblue/secureblue/blob/live/files/system/usr/lib/modprobe.d/secureblue.conf#L195 ) for config_to_disable in "${configs_to_disable[@]}"; do From f1ffb76a7f327af5ff4e6f8f39c289ecabb3f906 Mon Sep 17 00:00:00 2001 From: RoyalOughtness <129108030+RoyalOughtness@users.noreply.github.com> Date: Sun, 27 Sep 2026 22:35:50 -0700 Subject: [PATCH 2/4] fix --- copr_script.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/copr_script.sh b/copr_script.sh index 447960c..1a313d6 100644 --- a/copr_script.sh +++ b/copr_script.sh @@ -341,6 +341,7 @@ configs_to_disable=( # Legacy game port support # https://cateee.net/lkddb/web-lkddb/GAMEPORT.html # Already blocked at runtime: https://github.com/secureblue/secureblue/blob/live/files/system/usr/lib/modprobe.d/secureblue.conf#L195 + CONFIG_GAMEPORT ) for config_to_disable in "${configs_to_disable[@]}"; do From 75d39a675f87e9bf474ae91e34c46e5020715581 Mon Sep 17 00:00:00 2001 From: RoyalOughtness <129108030+RoyalOughtness@users.noreply.github.com> Date: Mon, 28 Sep 2026 00:20:33 -0700 Subject: [PATCH 3/4] joystick modules --- copr_script.sh | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) diff --git a/copr_script.sh b/copr_script.sh index 1a313d6..4b1be33 100644 --- a/copr_script.sh +++ b/copr_script.sh @@ -339,9 +339,44 @@ configs_to_disable=( CONFIG_PARPORT # Legacy game port support + # And all joystick modules aside from xpad # https://cateee.net/lkddb/web-lkddb/GAMEPORT.html # Already blocked at runtime: https://github.com/secureblue/secureblue/blob/live/files/system/usr/lib/modprobe.d/secureblue.conf#L195 CONFIG_GAMEPORT + CONFIG_JOYSTICK_A3D + CONFIG_JOYSTICK_ADC + CONFIG_JOYSTICK_ADI + CONFIG_JOYSTICK_ANALOG + CONFIG_JOYSTICK_AS5011 + CONFIG_JOYSTICK_COBRA + CONFIG_JOYSTICK_DB9 + CONFIG_JOYSTICK_FSIA6B + CONFIG_JOYSTICK_GAMECON + CONFIG_JOYSTICK_GF2K + CONFIG_JOYSTICK_GRIP + CONFIG_JOYSTICK_GRIP_MP + CONFIG_JOYSTICK_GUILLEMOT + CONFIG_JOYSTICK_IFORCE_232 + CONFIG_JOYSTICK_IFORCE + CONFIG_JOYSTICK_IFORCE_USB + CONFIG_JOYSTICK_INTERACT + CONFIG_JOYSTICK_JOYDUMP + CONFIG_JOYSTICK_MAGELLAN + CONFIG_JOYSTICK_PSXPAD_SPI_FF + CONFIG_JOYSTICK_PSXPAD_SPI + CONFIG_JOYSTICK_PXRC + CONFIG_JOYSTICK_QWIIC + CONFIG_JOYSTICK_SEESAW + CONFIG_JOYSTICK_SENSEHAT + CONFIG_JOYSTICK_SIDEWINDER + CONFIG_JOYSTICK_SPACEBALL + CONFIG_JOYSTICK_SPACEORB + CONFIG_JOYSTICK_STINGER + CONFIG_JOYSTICK_TMDC + CONFIG_JOYSTICK_TURBOGRAFX + CONFIG_JOYSTICK_TWIDJOY + CONFIG_JOYSTICK_WALKERA0701 + CONFIG_JOYSTICK_WARRIOR ) for config_to_disable in "${configs_to_disable[@]}"; do From 458305cb0dad61b3830a3982b4f886740e86ee1a Mon Sep 17 00:00:00 2001 From: RoyalOughtness <129108030+RoyalOughtness@users.noreply.github.com> Date: Mon, 28 Sep 2026 00:25:29 -0700 Subject: [PATCH 4/4] one more --- copr_script.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/copr_script.sh b/copr_script.sh index 4b1be33..11c7d14 100644 --- a/copr_script.sh +++ b/copr_script.sh @@ -377,6 +377,7 @@ configs_to_disable=( CONFIG_JOYSTICK_TWIDJOY CONFIG_JOYSTICK_WALKERA0701 CONFIG_JOYSTICK_WARRIOR + CONFIG_JOYSTICK_ZHENHUA ) for config_to_disable in "${configs_to_disable[@]}"; do