
Paranoid disable whole AF_ALG + algif_* modules - Copy Fail (CVE-2026-31431)
# ================================
# Paranoid AF_ALG hardening script
# ================================
# Blocks all user-space kernel crypto interfaces (AF_ALG + algif_* modules)
# Mitigates CVE-2026-31431 and reduces future attack surface
#
# Safe for normal systems (SSH, TLS, LUKS, WireGuard)
# Only breaks rare apps using AF_ALG sockets directly
# ================================