{"id":170848,"date":"2026-05-18T00:24:30","date_gmt":"2026-05-17T22:24:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux"},"modified":"2026-05-18T00:24:30","modified_gmt":"2026-05-17T22:24:30","slug":"modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","title":{"rendered":"ModuleJail p\u00ebr bllokimin e moduleve t\u00eb pap\u00ebrdorura t\u00eb b\u00ebrtham\u00ebs Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Jasper Nuyens, the founder of Linux Belgium, who created an extension for using Linux in Tesla's automotive information system, proposed a simple way to reduce the attack surface of the Linux kernel to lower the likelihood of compromise amid a surge in the discovery of dangerous vulnerabilities using AI. Since many vulnerabilities are often found in specific kernel modules that are autoloaded but typically not used by most users, Jasper suggested blocking, by default, the modules that are not used in the current system or are generally rarely utilized. <\/p>\n

There are several thousand modules available in the kernel, but only a few hundred are typically used in most systems, while the rest remain available for loading and could potentially contain vulnerabilities. The idea is implemented via a script called ModuleJail, which determines the list of modules used in the current system (via \/proc\/modules) and automatically blacklists unused modules. The script is written in shell, utilizes common system utilities (enough busybox), and is distributed under the GPLv3 license. <\/p>\n

Skrypti mb\u00ebshtet ekzekutimin n\u00eb Debian, Ubuntu, RHEL, Fedora, SUSE, AlmaLinux, Rocky Linux, Alpine dhe Arch Linux, dhe si rezultat i pun\u00ebs s\u00eb tij gjeneron skedarin \/etc\/modprobe.d\/modulejail-blacklist.conf, i cili p\u00ebrdoret zakonisht n\u00eb sistem p\u00ebr t\u00eb \u00e7aktivizuar ngarkimin e automatizuar t\u00eb moduleve t\u00eb b\u00ebrtham\u00ebs. Ky qasje lejon mbrojtjen preventive t\u00eb sistemit tuaj, pa pasur nevoj\u00eb p\u00ebr ngarkimin e moduleve t\u00eb specializuara t\u00eb b\u00ebrtham\u00ebs ose p\u00ebr ekzekutimin e proceseve t\u00eb shtes\u00eb n\u00eb sfond p\u00ebr monitorim. <\/p>\n

N\u00eb rast se \u00ebsht\u00eb e nevojshme, p\u00ebrdoruesit i ofrohet mund\u00ebsia p\u00ebr t\u00eb shtuar n\u00eb list\u00ebn e bardh\u00eb modulet q\u00eb aktualisht nuk jan\u00eb ngarkuar, por potencialisht mund t\u00eb p\u00ebrdoren n\u00eb funksionim. Po ashtu, jan\u00eb t\u00eb disponueshme p\u00ebr t'u aktivizuar profile q\u00eb lejojn\u00eb p\u00ebrdorimin e moduleve m\u00eb t\u00eb nevojshme p\u00ebr aplikimet tipike t\u00eb sistemit. Ofrohen profilet \u00abminimal\u00bb (vet\u00ebm modulet m\u00eb t\u00eb r\u00ebnd\u00ebsishme dhe sistemet baze), \u00abkonservatore\u00bb (+ drejtuesit tipik\u00eb p\u00ebr server\u00ebt dhe makinave virtuale<\/a>) dhe desktop (+ drejtuesit p\u00ebr WiFi, Bluetooth, zvuk dhe video).
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0436\u0430\u0441\u043f\u0435\u0440 \u041d\u044e\u0439\u0435\u043d\u0441 (Jasper Nuyens), \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Belgium, \u0441\u043e\u0437\u0434\u0430\u0432\u0448\u0438\u0439 \u043d\u0430\u0434\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Linux \u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 Tesla, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044f\u0434\u0440\u043e Linux \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043d\u0430 \u0444\u043e\u043d\u0435 \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 AI. \u0422\u0430\u043a \u043a\u0430\u043a \u043c\u043d\u043e\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u0432 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 \u044f\u0434\u0440\u0430, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170848","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ModuleJail p\u00ebr bllokimin e moduleve t\u00eb pa p\u00ebrdorura t\u00eb b\u00ebrtham\u00ebs Linux | ProHoster","description":"Jasper Nuyens, themeluesi i organizat\u00ebs Linux Belgium, q\u00eb krijoi nj\u00eb shtes\u00eb p\u00ebr p\u00ebrdorimin e Linux n\u00eb sistemin informacion t\u00eb automjeteve Tesla, propozoi nj\u00eb m\u00ebnyr\u00eb t\u00eb thjesht\u00eb p\u00ebr t\u00eb reduktuar sip\u00ebrfaqen e sulmit ndaj b\u00ebrtham\u00ebs Linux p\u00ebr t\u00eb zvog\u00ebluar probabilitetin e kompromitimit n\u00eb kontekstin e rritjes s\u00eb zbulimeve t\u00eb dob\u00ebsive t\u00eb rrezikshme p\u00ebrmes AI. Duke qen\u00eb se shum\u00eb dob\u00ebsi zakonisht gjenden n\u00eb module specifike t\u00eb b\u00ebrtham\u00ebs, t\u00eb disponueshme p\u00ebr ngarkes\u00eb automatike, por","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ModuleJail \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u044f\u0434\u0440\u0430 Linux | ProHoster","og:description":"\u0414\u0436\u0430\u0441\u043f\u0435\u0440 \u041d\u044e\u0439\u0435\u043d\u0441 (Jasper Nuyens), \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Belgium, \u0441\u043e\u0437\u0434\u0430\u0432\u0448\u0438\u0439 \u043d\u0430\u0434\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Linux \u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 Tesla, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044f\u0434\u0440\u043e Linux \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043d\u0430 \u0444\u043e\u043d\u0435 \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 AI. \u0422\u0430\u043a \u043a\u0430\u043a \u043c\u043d\u043e\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u0432 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 \u044f\u0434\u0440\u0430, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u043d\u043e","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-17T22:24:30+00:00","article:modified_time":"2026-05-17T22:24:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/170848","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=170848"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/170848\/revisions"}],"predecessor-version":[{"id":181605,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/170848\/revisions\/181605"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=170848"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=170848"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=170848"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}