jnuyens/modulejail
Proactively shrink a Linux host's kernel-module attack surface by blacklisting every module not currently in use.
4 best points · 1 comments · 3 Hacker News posts · 346 GitHub stars · View on GitHub
Hacker News discussions
- New "ModuleJail" to Automatically Blacklist Unused Kernel Modules (4 points, 1 comments, by thefreelantern, 2026-05-13)
- Modulejail: Proactively shrink a Linux host's kernel-module attack surface (3 points, 0 comments, by thunderbong, 2026-05-23)
- Modulejail: Shrink a Linux kernel-module attack surface by blacklisting modules (1 points, 0 comments, by wingmanjd, 2026-05-18)