Comment on Singularity Rootkit: SELinux bypass and netlink filter (ss/conntrack hidden)parentComments−wmf8moThere are ways to block unsigned modules. You also need to lock down /dev/kmem which apparently distros already do.
Comments
There are ways to block unsigned modules. You also need to lock down /dev/kmem which apparently distros already do.