Endpoint Administration Guide for UNIX › Protecting Files and Programs › Kernel Modules Load and Unload Protection › Enable and Disable Kernel Module Protection

Enable and Disable Kernel Module Protection

When kernel module protection is enabled, CA ControlMinder checks the loading and unloading of the kernel modules that are defined in the CA ControlMinder database.

By default, CA ControlMinder enables protection of kernel modules.

To enable or disable kernel mode protection, enable or disable the KMODULE class, for example by using the setoptions command.

Example: Enable Kernel Mode Protection Using selang

The following selang command enables kernel mode protection:

setoptions class+(kmodule)

Example: Disable Kernel Mode Protection Using selang

The following selang command disables kernel mode protection:

setoptions class-(KMODULE)