Previous Topic: Protect a Kernel ModuleNext Topic: Enable and Disable File Path Checking on Kernel Module Loads


Enable and Disable Kernel Module Protection

When kernel module protection is enabled, CA ControlMinder checks the loading and unloading of the kernel modules that are defined in the CA ControlMinder database.

By default, CA ControlMinder enables protection of kernel modules.

To enable or disable kernel mode protection, enable or disable the KMODULE class, for example by using the setoptions command.

Example: Enable Kernel Mode Protection Using selang

The following selang command enables kernel mode protection:

setoptions class+(kmodule)

Example: Disable Kernel Mode Protection Using selang

The following selang command disables kernel mode protection:

setoptions class-(KMODULE)