Comment on Singularity Rootkit: SELinux bypass and netlink filter (ss/conntrack hidden)parentComments−Joel_Mckay8moCould always try:echo 1 > /proc/sys/kernel/modules_disabledWhich is supposed to block dynamic loading modules until a reboot. =3−matheuzsecOP8moThis is not permanent; if the system is rebooted, it will be undone :)−egberts17moKernel bootline can be uodated to include this option: modules_disabled
Comments
Could always try:
echo 1 > /proc/sys/kernel/modules_disabled
Which is supposed to block dynamic loading modules until a reboot. =3
This is not permanent; if the system is rebooted, it will be undone :)
Kernel bootline can be uodated to include this option: