---
# Kernel defaults (override per host if needed)
modprobe_blacklist_file: /etc/modprobe.d/cis_blacklist.conf

# Additional kernel modules to disable
blacklist_modules:
  - tipc