how to enable "Runtime module disabling" in Custom config ?

[perlish]

I thought "Runtime module disabling" is a cool stuff to avoid LKM rootkit,but how can I enable it in Custom config ?

[spender]

viewtopic.php?f=3&t=2187&p=9234&hilit=modules_disable#p9234

-Brad

[perlish]

modules_disabled can be set in the rc.local or sysctl.conf.
We can make sure that lkm rootkit must load after the modules_disable turning on ?
if the hacker use adore-ng to relink some modules,I guess the adore-ng can load successful.

[spender]

They can also modify the kernel to backdoor the system on the next reboot. The feature in mainline is essentially the same as the one I had: it only prevents loading modules after the point you specify, until a reboot. If being able to load modules at all is a problem, then just disable module support. Otherwise, you need to be using RBAC.

-Brad