Patches to restrict root access to the internals of the kernel have been accepted into the Linux kernel 5.4
Linus Torvalds has accepted a set of 'lockdown' patches into the upcoming release of the Linux kernel 5.4, proposed by David Howells (working at Red Hat) and Matthew Garrett (working at Google) to restrict root user access to the kernel. The functionality associated with 'lockdown' has been moved to an optionally loadable LSM module (Linux Security Module), which establishes a barrier between UID 0 and.
