Anonymous Intelligence Signal

openSUSE Splits RNDIS Blacklist, Unblacklist Tool Now Works for Any Module

human The Lab unverified 2026-04-21 19:23:03 Source: GitHub Issues

The openSUSE project has restructured its kernel module blacklist, splitting a single, monolithic configuration file into targeted, per-module entries. The key change is the generalization of the `unblacklist` tool, which now works for any blacklisted module, not just filesystems. This directly addresses a significant user experience issue where individuals needing USB tethering with Android devices were previously blocked without a clear path forward.

Previously, all RNDIS-related modules were bundled in `50-blacklist-rndis.conf`. The new structure creates three distinct files: `50-blacklist-rndis_host.conf` (with interactive `unblacklist` integration), `50-blacklist-rndis_wlan.conf` (a plain blacklist due to CVE-2023-23559), and `50-blacklist-usb_f_rndis.conf` (a plain blacklist for the gadget driver). This granularity is critical. Now, a user who runs `modprobe rndis_host` for tethering will be interactively prompted to un-blacklist *only* that specific driver, while the security-blacklisted `rndis_wlan` and the unrelated gadget driver remain securely blocked.

The fix resolves the discoverability problem documented in bug bsc#1262299, bringing USB tethering usability in line with the existing process for filesystem modules. It follows the architectural direction agreed upon in related discussion #128. This change reduces friction for legitimate use cases while maintaining security boundaries, demonstrating a precise approach to balancing system safety with practical user needs in a major Linux distribution.