Is it possible to disable kernel module (un)loading for security purposes?
Yes. As of version 1.5.0-rc3 the GENERIC kernel on the CD includes the ability for one to disable any further kernel module loading or unloading until the next reboot. Use the following command to disable kernel module loading: “echo off > /proc/modules”. Note: Given the modular nature of the Sentry Firewall kernel, please be sure to test this option thoroughly before deploying it on a production system.
Related Questions
- When trying to unload/disable a module I get the error "Insufficient security privilege to unload/disable a module" in the popup window. What do I do?
- Is the message about the kernel being tainted upon loading the module normal?
- Is it possible to disable kernel module (un)loading for security purposes?
