Runtime module disabling support added by default to 2.6.31

[spender]

If you were using the runtime module disabling feature of grsecurity in the past, you should be aware that in the upcoming 2.6.31 kernel, support for the same feature has been added by default (just by having module support). The new sysctl entry for it is:

/proc/sys/kernel/modules_disabled

To disable module loading at runtime, do a:

echo 1 > /proc/sys/kernel/modules_disabled

Since this feature now exists in the vanilla kernel by default, the grsecurity feature (and sysctl entry) have been removed.

-Brad

[specs]

I allways thought the right way to do that would be

# sysctl kernel.modules_disabled=0