Software method:
- Disable the Firewire driver / recompile kernel
Disabling the firewire driver prevents the use of any firewire device, as it disables the firewire hardware controller. In order for the attacks to work several requirements exist: The driver must be loaded so that the controller is initialised (bus-mastering etc), it must be configured to 'open-access' and not per-device, and dma must be enabled (ohci1394 had a disable dma option).
In Ubuntu firewire drivers are kernel modules. There is an easy way to blacklist them: Open /etc/modprobe.d/blacklist-firewire.conf
, there you will find there a list of modules to be blacklisted.
blacklist ohci1394
blacklist sbp2
blacklist dv1394
blacklist raw1394
blacklist video1394
#blacklist firewire-ohci
#blacklist firewire-sbp2
Just remove the #
in front of everything and save it. Then run sudo update-initramfs -k all -u
Other methods:
- Disable the Firewire ports in BIOS
- Seal the actual ports, as often done for USB ports in some environments.