jnuyens/modulejail: Proactively shrink a Linux host's kernel-module attack surface by blacklisting every module not currently in use. (opens in new tab)

Proactively shrink a Linux host's kernel-module attack surface by blacklisting every module not currently in use. - jnuyens/modulejail