From 79241c5d09c4a7123cf90b45289b53d893135efb Mon Sep 17 00:00:00 2001
From: madaidan <50278627+madaidan@users.noreply.github.com>
Date: Mon, 23 Dec 2019 20:28:29 +0000
Subject: [PATCH] Make /lib/modules unreadable

---
 etc/permission-hardening.d/30_default.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/etc/permission-hardening.d/30_default.conf b/etc/permission-hardening.d/30_default.conf
index 96fe0e8..6f883bb 100644
--- a/etc/permission-hardening.d/30_default.conf
+++ b/etc/permission-hardening.d/30_default.conf
@@ -91,6 +91,7 @@ dbus-daemon-launch-helper matchwhitelist
 /boot/ 0700 root root
 /etc/permission-hardening.d 0600 root root
 /usr/local/etc/permission-hardening.d 0600 root root
+/lib/modules/ 0700 root root
 
 ######################################################################
 # SUID/SGID Removal