- Disable the Firewire driver / recompile kernel
Disabling the firewire driver prevents the use of any firewire device, as it disables the firewire hardware controller. In order for the attacks to work several requirements exist: The driver must be loaded so that the controller is initialised (bus-mastering etc), it must be configured to 'open-access' and not per-device, and dma must be enabled (ohci1394 had a disable dma option).
In Ubuntu firewire drivers are kernel modules. There is an easy way to blacklist them: Open
/etc/modprobe.d/blacklist-firewire.conf, there you will find there a list of modules to be blacklisted.
Just remove the
# in front of everything and save it. Then run
sudo update-initramfs -k all -u
- Disable the Firewire ports in BIOS
- Seal the actual ports, as often done for USB ports in some environments.