Could always try: echo 1 > /proc/sys/kernel/modules_disabled Which is supposed t... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Joel_Mckay 70 days ago \| parent \| context \| favorite \| on: Singularity Rootkit: SELinux bypass and netlink fi... Could always try: echo 1 > /proc/sys/kernel/modules_disabled Which is supposed to block dynamic loading modules until a reboot. =3

matheuzsec 70 days ago [–]

This is not permanent; if the system is rebooted, it will be undone :)

egberts1 62 days ago | [–]

Kernel bootline can be uodated to include this option:

    modules_disabled

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact