security-misc/lib/systemd/system/harden-module-loading.service
monsieuremre a187d23c41
big fix
2023-11-04 20:56:08 +00:00

15 lines
519 B
Desktop File

[Unit]
Description=Disable the loading of modules to the kernel after startup. This could be malicious.
After=systemd-modules-load.service
Before=sysinit.target
# This functionality is implemented with this and not directly in the sysctl config is
# to allow systemd-modules-load.service to load the modules with no problem but
# to disallow anyone else do the same after the system boots up.
[Service]
Type=oneshot
ExecStart=/usr/libexec/security-misc/disable-kernel-module-loading
[Install]
WantedBy=sysinit.target