Kernel hardening: Disable and blacklist Linux modules

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

The Linux kernel is modular, which makes it more flexible than monolithic kernels. New functionality can be easily added to a run kernel, by loading the related module. While that is great, it can also be misused. You can think of loading malicious modules (e.g. rootkits), or unauthorized access to the server and copy data via a USB port. In our previous article about kernel modules , we looked at…

Read on linux-audit.com ↗