modulejail: modulejail (creating a blacklist of unused kernel modules)
modulejail:
modulejail: Proactively shrink a Linux host's kernel-module attack surface by
modulejail: blacklisting every module not currently in use.
modulejail: A single POSIX shell script that shrinks a Linux host's kernel-module
modulejail: attack surface by writing a modprobe.d blacklist for every kernel
modulejail: module not currently in use, minus a built-in baseline and an optional
modulejail: sysadmin whitelist.
modulejail:
modulejail:
modulejail: