{"id":170848,"date":"2026-05-18T00:24:30","date_gmt":"2026-05-17T22:24:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux"},"modified":"2026-05-18T00:24:30","modified_gmt":"2026-05-17T22:24:30","slug":"modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","title":{"rendered":"ModuleJail para bloquear m\u00f3dulos de kernel Linux n\u00e3o utilizados","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Jasper Nuyens, fundador da organiza\u00e7\u00e3o Linux Belgium, que criou uma extens\u00e3o para usar o Linux em sistemas de informa\u00e7\u00e3o dos carros Tesla, prop\u00f4s uma maneira simples de reduzir a superf\u00edcie de ataque do kernel Linux, diminuindo a probabilidade de comprometimento diante do aumento na detec\u00e7\u00e3o de vulnerabilidades perigosas com o uso de IA. Como muitas vulnerabilidades costumam ser encontradas em m\u00f3dulos espec\u00edficos do kernel, dispon\u00edveis para inicializa\u00e7\u00e3o autom\u00e1tica, mas geralmente n\u00e3o utilizados pela maioria dos usu\u00e1rios, Jasper sugeriu bloquear por padr\u00e3o m\u00f3dulos que n\u00e3o s\u00e3o utilizados no sistema atual ou raramente utilizados de modo geral. <\/p>\n

Existem milhares de m\u00f3dulos dispon\u00edveis no kernel, mas na maioria dos sistemas apenas algumas centenas s\u00e3o utilizados, enquanto os restantes permanecem dispon\u00edveis para carregamento e potencialmente podem conter vulnerabilidades. A ideia \u00e9 implementada atrav\u00e9s do script ModuleJail, que define uma lista de m\u00f3dulos utilizados no sistema atual (via \/proc\/modules) e, automaticamente, coloca os m\u00f3dulos n\u00e3o utilizados na lista negra. O script \u00e9 escrito em shell, utiliza utilit\u00e1rios de sistema comuns (basta o busybox) e \u00e9 distribu\u00eddo sob a licen\u00e7a GPLv3. <\/p>\n

O script suporta execu\u00e7\u00e3o em Debian, Ubuntu, RHEL, Fedora, SUSE, AlmaLinux, Rocky Linux, Alpine e Arch Linux, e como resultado de seu funcionamento gera o arquivo \/etc\/modprobe.d\/modulejail-blacklist.conf, que \u00e9 usado no sistema para desativar a inicializa\u00e7\u00e3o autom\u00e1tica de m\u00f3dulos do kernel. Essa abordagem permite proteger proativamente o seu sistema, sem ter que carregar m\u00f3dulos especializados do kernel ou executar processos em segundo plano adicionais para monitorar o sistema. <\/p>\n

Se necess\u00e1rio, o usu\u00e1rio tem a op\u00e7\u00e3o de adicionar \u00e0 lista branca os m\u00f3dulos que n\u00e3o est\u00e3o carregados no momento, mas que podem ser usados em opera\u00e7\u00f5es. Perfis que permitem o uso dos m\u00f3dulos mais necess\u00e1rios para aplica\u00e7\u00f5es t\u00edpicas do sistema tamb\u00e9m est\u00e3o dispon\u00edveis para inclus\u00e3o. Os perfis 'minimal' (apenas os m\u00f3dulos mais importantes e os principais sistemas de arquivos) e 'conservative' (+ drivers t\u00edpicos para servidores e m\u00e1quinas virtuais<\/a>) e desktop (+ drivers para Wi-Fi, Bluetooth, \u00e1udio e v\u00eddeo).
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0436\u0430\u0441\u043f\u0435\u0440 \u041d\u044e\u0439\u0435\u043d\u0441 (Jasper Nuyens), \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Belgium, \u0441\u043e\u0437\u0434\u0430\u0432\u0448\u0438\u0439 \u043d\u0430\u0434\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Linux \u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 Tesla, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044f\u0434\u0440\u043e Linux \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043d\u0430 \u0444\u043e\u043d\u0435 \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 AI. \u0422\u0430\u043a \u043a\u0430\u043a \u043c\u043d\u043e\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u0432 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 \u044f\u0434\u0440\u0430, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170848","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ModuleJail para bloquear m\u00f3dulos n\u00e3o utilizados do n\u00facleo Linux | ProHoster","description":"Jasper Nuyens, fundador da organiza\u00e7\u00e3o Linux Belgium, que criou uma camada para usar o Linux no sistema de informa\u00e7\u00e3o dos carros Tesla, prop\u00f4s uma maneira simples de reduzir a superf\u00edcie de ataque.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ModuleJail \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u044f\u0434\u0440\u0430 Linux | ProHoster","og:description":"\u0414\u0436\u0430\u0441\u043f\u0435\u0440 \u041d\u044e\u0439\u0435\u043d\u0441 (Jasper Nuyens), \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Belgium, \u0441\u043e\u0437\u0434\u0430\u0432\u0448\u0438\u0439 \u043d\u0430\u0434\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Linux \u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 Tesla, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-17T22:24:30+00:00","article:modified_time":"2026-05-17T22:24:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/170848","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=170848"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/170848\/revisions"}],"predecessor-version":[{"id":181605,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/170848\/revisions\/181605"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=170848"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=170848"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=170848"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}