[ forky ]
[ sid ]
[ Source: modulejail ]
Package: modulejail (1.5.1-1)
Links for modulejail
Debian Resources:
Download Source Package modulejail:
Maintainer:
External Resources:
- Homepage [github.com]
Similar packages:
Shrink Linux kernel-module attack surface
ModuleJail snapshots the set of currently loaded modules and writes a modprobe.d blacklist for every kernel module not currently in use, minus a built-in baseline and an optional sysadmin-supplied whitelist.
Aimed at Linux fleet operators who need to harden many servers against the wave of AI-assisted kernel privilege-escalation discoveries. Every additional loaded module is additional latent attack surface for the next disclosed CVE.
No daemon, no continuous monitoring, no AI inside the tool. One shell script, run once on a steady-state host, that writes one modprobe.d blacklist file.
Download modulejail
| Architecture | Package Size | Installed Size | Files |
|---|---|---|---|
| all | 60.1 kB | 138.0 kB | [list of files] |