When kernel module protection is enabled, CA ControlMinder checks the loading and unloading of the kernel modules that are defined in the CA ControlMinder database.
By default, CA ControlMinder enables protection of kernel modules.
To enable or disable kernel mode protection, enable or disable the KMODULE class, for example by using the setoptions command.
Example: Enable Kernel Mode Protection Using selang
The following selang command enables kernel mode protection:
setoptions class+(kmodule)
Example: Disable Kernel Mode Protection Using selang
The following selang command disables kernel mode protection:
setoptions class-(KMODULE)
Copyright © 2013 CA Technologies.
All rights reserved.
|
|