matheuzsec on Singularity Rootkit: SELinux bypass and netlink filter (ss/conntrack hidden) · Hackerly

Comment on Singularity Rootkit: SELinux bypass and netlink filter (ss/conntrack hidden)parent

matheuzsecOP8mo

This is not permanent; if the system is rebooted, it will be undone :)

Kernel bootline can be uodated to include this option:

    modules_disabled