diff --git a/etc/permission-hardening.d/30_default.conf b/etc/permission-hardening.d/30_default.conf
index 96fe0e8..6f883bb 100644
--- a/etc/permission-hardening.d/30_default.conf
+++ b/etc/permission-hardening.d/30_default.conf
@@ -91,6 +91,7 @@ dbus-daemon-launch-helper matchwhitelist
 /boot/ 0700 root root
 /etc/permission-hardening.d 0600 root root
 /usr/local/etc/permission-hardening.d 0600 root root
+/lib/modules/ 0700 root root
 
 ######################################################################
 # SUID/SGID Removal