the "whitelist" word implies that white is better than black. Let's get
rid of that.

Currently translated at 17.7% (11 of 62 strings)

Translation: Tails/wiki/src/news/version_3.14.1.*.po
Translate-URL: http://translate.tails.boum.org/projects/tails/wikisrcnewsversion_3141po/pt/

Currently translated at 39.0% (16 of 41 strings)

Translation: Tails/wiki/src/news/version_3.11.*.po
Translate-URL: http://translate.tails.boum.org/projects/tails/wikisrcnewsversion_311po/it/

refs: #12362

Refactor 80-block-network to avoid a function whose name ends with "filter" to modify the filtered lines (refs: #12362).

... so they can be blacklisted without us having to manually maintain
this list.

Will-fix: #12362

Will-fix: #12363

Blacklisted (via `blacklist MODULENAME`) modules are only blocked from
being loaded during the boot process, but are still loadable with an
explicit `modprobe MODULENAME`, and (worse!) via kernel module
auto-loading.

Its "source code" contains a binary object meant to be loaded into the kernel.
We have good reasons to ship binary firmware blobs, but going as far as shipping
binary kernel modules is something different: we have never crossed that line
yet, and IMO we should not.

This reverts commits 6024ec97,
b5c40c35,
b51a4edd and
35757e7c.

Refs: #7798

We also add a script that undoes this by unblocking the modules and
making udev re-probe for devices. This script is intended to be run
from T-G's PostLogin script, if MAC spoofing is enabled.