Fix some bugs about disable kernel module

bin/hardening/14.1_security_related_NAT_slipstreaming.sh

@@ -60,9 +60,11 @@ apply () {
 			else
 				warn "$BLACKLIST_CONF is not set to blacklist, add to config file $HARBIAN_SEC_CONF_FILE"
 				if [ -w $HARBIAN_SEC_CONF_FILE ]; then
+					add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $BLACKLIST_CONF /bin/true" 
 					add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $BLACKLIST_CONF"
 				else
 					touch $HARBIAN_SEC_CONF_FILE
+					add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $BLACKLIST_CONF /bin/true" 
 					add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $BLACKLIST_CONF"
 				fi
 			fi

bin/hardening/2.18_disable_cramfs.sh

@@ -46,9 +46,11 @@ apply () {
 	else
 		warn "$MODULE_NAME is not set to blacklist, add to config file $HARBIAN_SEC_CONF_FILE"
 		if [ -w $HARBIAN_SEC_CONF_FILE ]; then
+			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $MODULE_NAME /bin/true"
 			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $MODULE_NAME"
 		else
 			touch $HARBIAN_SEC_CONF_FILE
+			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $MODULE_NAME /bin/true"
 			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $MODULE_NAME"
 		fi
 	fi

bin/hardening/2.19_disable_freevxfs.sh

@@ -47,8 +47,10 @@ apply () {
 		warn "$MODULE_NAME is not set to blacklist, add to config file $HARBIAN_SEC_CONF_FILE"
 		if [ -w $HARBIAN_SEC_CONF_FILE ]; then
 			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $MODULE_NAME"
+			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $MODULE_NAME /bin/true"
 		else
 			touch $HARBIAN_SEC_CONF_FILE
+			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $MODULE_NAME /bin/true"
 			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $MODULE_NAME"
 		fi
 	fi

bin/hardening/2.20_disable_jffs2.sh

@@ -45,9 +45,11 @@ apply () {
 	else
 		warn "$MODULE_NAME is not set to blacklist, add to config file $HARBIAN_SEC_CONF_FILE"
 		if [ -w $HARBIAN_SEC_CONF_FILE ]; then
+			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $MODULE_NAME /bin/true"
 			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $MODULE_NAME"
 		else
 			touch $HARBIAN_SEC_CONF_FILE
+			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $MODULE_NAME /bin/true"
 			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $MODULE_NAME"
 		fi
 	fi

bin/hardening/2.21_disable_hfs.sh

@@ -45,9 +45,11 @@ apply () {
 	else
 		warn "$MODULE_NAME is not set to blacklist, add to config file $HARBIAN_SEC_CONF_FILE"
 		if [ -w $HARBIAN_SEC_CONF_FILE ]; then
+			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $MODULE_NAME /bin/true"
 			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $MODULE_NAME"
 		else
 			touch $HARBIAN_SEC_CONF_FILE
+			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $MODULE_NAME /bin/true"
 			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $MODULE_NAME"
 		fi
 	fi

bin/hardening/2.22_disable_hfsplus.sh

@@ -45,9 +45,11 @@ apply () {
 	else
 		warn "$MODULE_NAME is not set to blacklist, add to config file $HARBIAN_SEC_CONF_FILE"
 		if [ -w $HARBIAN_SEC_CONF_FILE ]; then
+			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $MODULE_NAME /bin/true"
 			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $MODULE_NAME"
 		else
 			touch $HARBIAN_SEC_CONF_FILE
+			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $MODULE_NAME /bin/true"
 			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $MODULE_NAME"
 		fi
 	fi

bin/hardening/2.23_disable_squashfs.sh

@@ -45,9 +45,11 @@ apply () {
 	else
 		warn "$MODULE_NAME is not set to blacklist, add to config file $HARBIAN_SEC_CONF_FILE"
 		if [ -w $HARBIAN_SEC_CONF_FILE ]; then
+			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $MODULE_NAME /bin/true"
 			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $MODULE_NAME"
 		else
 			touch $HARBIAN_SEC_CONF_FILE
+			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $MODULE_NAME /bin/true"
 			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $MODULE_NAME"
 		fi
 	fi

bin/hardening/2.24_disable_udf.sh

@@ -45,9 +45,11 @@ apply () {
 	else
 		warn "$MODULE_NAME is not set to blacklist, add to config file $HARBIAN_SEC_CONF_FILE"
 		if [ -w $HARBIAN_SEC_CONF_FILE ]; then
+			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $MODULE_NAME /bin/true"
 			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $MODULE_NAME"
 		else
 			touch $HARBIAN_SEC_CONF_FILE
+			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "install $MODULE_NAME /bin/true"
 			add_end_of_file "$HARBIAN_SEC_CONF_FILE" "blacklist $MODULE_NAME"
 		fi
 	fi

bin/hardening/4.8_disable_usb_devices.sh

@@ -96,10 +96,12 @@ apply () {
 		if [ -f $BLACKCONFILE ]; then
 			warn "Add $BLACKRULE to $BLACKCONFILE"
 			add_end_of_file $BLACKCONFILE "$BLACKRULE"
+			add_end_of_file $BLACKCONFILE "blacklist usb_storage"
 		else
 			warn "Create $BLACKCONFILE and add $BLACKRULE to $BLACKCONFILE"
 			touch $BLACKCONFILE
 			chmod 644 $BLACKCONFILE
+			add_end_of_file $BLACKCONFILE "blacklist usb_storage"
 			add_end_of_file $BLACKCONFILE "$BLACKRULE"
 		fi
     fi