View source for Vuln kernel loadable modules

= Kernel Module loading is allowed =

This vulnerability means that Kernel Module loading is allowed. Linux kernels can be modified dynamically to allow what are called kernel modules to be loaded on demand.  This can allow the system to load kernel capabilities when an application or user requires them.  This also allows an attacker to install a kernel module rootkit, and ASL can prevent this from occurring.  This vulnerability means that the kernel can be modified.

If you see this vulnerability it is caused by:

1) You are not running the [[ASL]] kernel

2) Or, you have disabled this protection in the [[ASL]] kernel.

= Next Steps =

First check to see if you are using the ASL kernel by going to this [https://www.atomicorp.com/wiki/index.php/Kernel#How_to_tell_if_you_are_running_the_ASL_kernel link].

'''If you are not running the ASL kernel:'''

Please reboot your system into the ASL kernel.

Note: If you have a VPS system, you will not have your own kernel.  Please install ASL on the host server.

'''If you are running the ASL kernel:'''

Log into the ASL GUI, click on Configuration and select the ASL configuration menu option.  This will open the ASL configuration screen.  Scroll down to ALLOW_kmod_loading and set this to "no" then click update.  You will need to reboot your server for this setting to be implemented on the server.