{"id":170848,"date":"2026-05-18T00:24:30","date_gmt":"2026-05-17T22:24:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux"},"modified":"2026-05-18T00:24:30","modified_gmt":"2026-05-17T22:24:30","slug":"modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","title":{"rendered":"ModuleJail f\u00f6r att blockera oanv\u00e4nda moduler i Linux-k\u00e4rnan.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Jasper Nuyens, grundare av organisationen Linux Belgium, som skapade en f\u00f6rst\u00e4rkning f\u00f6r att anv\u00e4nda Linux i informationssystemet f\u00f6r Tesla-bilar, f\u00f6reslog ett enkelt s\u00e4tt att minska angreppsyta p\u00e5 Linux-k\u00e4rnan f\u00f6r att minska risken f\u00f6r kompromissering mot bakgrund av \u00f6kade uppt\u00e4ckter av farliga s\u00e5rbarheter med hj\u00e4lp av AI. Eftersom m\u00e5nga s\u00e5rbarheter ofta finns i specifika k\u00e4rnmoduler som \u00e4r tillg\u00e4ngliga f\u00f6r autoladdning men vanligtvis inte anv\u00e4nds av de flesta anv\u00e4ndare, f\u00f6reslog Jasper att man skulle blockera moduler som inte anv\u00e4nds i det aktuella systemet eller som s\u00e4llan anv\u00e4nds som standard. <\/p>\n

Det finns flera tusen moduler tillg\u00e4ngliga i k\u00e4rnan, men i de flesta system anv\u00e4nds bara n\u00e5gra hundra, medan resten f\u00f6rblir tillg\u00e4ngliga f\u00f6r nedladdning och potentiellt kan inneh\u00e5lla s\u00e5rbarheter. Id\u00e9n har realiserats genom skriptet ModuleJail, som definierar listan \u00f6ver moduler som anv\u00e4nds i det aktuella systemet (via \/proc\/modules) och automatiskt s\u00e4tter icke-anv\u00e4nda moduler p\u00e5 svarta listan. Skriptet \u00e4r skrivet i shell, anv\u00e4nder vanliga systemverktyg (tillr\u00e4ckligt med busybox) och sprids under GPLv3-licens. <\/p>\n

Skriptet st\u00f6der k\u00f6rning p\u00e5 Debian, Ubuntu, RHEL, Fedora, SUSE, AlmaLinux, Rocky Linux, Alpine och Arch Linux, och som ett resultat av sin verksamhet genererar det filen \/etc\/modprobe.d\/modulejail-blacklist.conf, som vanligtvis anv\u00e4nds i systemet f\u00f6r att st\u00e4nga av autoladdning av k\u00e4rnmoduler. Denna tillv\u00e4gag\u00e5ngss\u00e4tt m\u00f6jligg\u00f6r ett f\u00f6rebyggande skydd av sitt system utan att beh\u00f6va ladda ner specialiserade k\u00e4rnmoduler eller k\u00f6ra extra bakgrundsprocesser f\u00f6r system\u00f6vervakning. <\/p>\n

Vid behov har anv\u00e4ndaren m\u00f6jligheten att l\u00e4gga till moduler i vitlistan som f\u00f6r n\u00e4rvarande inte \u00e4r laddade, men som potentiellt kan anv\u00e4ndas i arbetet. Profiler som till\u00e5ter anv\u00e4ndning av de mest n\u00f6dv\u00e4ndiga modulerna f\u00f6r typiska till\u00e4mpningar av systemet \u00e4r ocks\u00e5 tillg\u00e4ngliga f\u00f6r aktivering. Professioner som \"minimal\" (endast de mest viktiga modulerna och grundl\u00e4ggande FS), \"conservative\" (+ typiska drivrutiner f\u00f6r servrar och virtuella maskiner<\/a>) och desktop (+ drivrutiner f\u00f6r WiFi, Bluetooth, ljud och video).
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0436\u0430\u0441\u043f\u0435\u0440 \u041d\u044e\u0439\u0435\u043d\u0441 (Jasper Nuyens), \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Belgium, \u0441\u043e\u0437\u0434\u0430\u0432\u0448\u0438\u0439 \u043d\u0430\u0434\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Linux \u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 Tesla, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044f\u0434\u0440\u043e Linux \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043d\u0430 \u0444\u043e\u043d\u0435 \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 AI. \u0422\u0430\u043a \u043a\u0430\u043a \u043c\u043d\u043e\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u0432 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 \u044f\u0434\u0440\u0430, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170848","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ModuleJail f\u00f6r att blockera oanv\u00e4nda moduler i Linux-k\u00e4rnan | ProHoster","description":"Jasper Nuyens, grundare av organisationen Linux Belgium, har skapat ett till\u00e4gg f\u00f6r att anv\u00e4nda Linux i Teslas informationssystem och f\u00f6resl\u00e5r ett enkelt s\u00e4tt att minska attackytan.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ModuleJail \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u044f\u0434\u0440\u0430 Linux | ProHoster","og:description":"\u0414\u0436\u0430\u0441\u043f\u0435\u0440 \u041d\u044e\u0439\u0435\u043d\u0441 (Jasper Nuyens), \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Belgium, \u0441\u043e\u0437\u0434\u0430\u0432\u0448\u0438\u0439 \u043d\u0430\u0434\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Linux \u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 Tesla, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/modulejail-dlya-blokirovki-neispolzuemyh-modulej-yadra-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-17T22:24:30+00:00","article:modified_time":"2026-05-17T22:24:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/170848","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=170848"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/170848\/revisions"}],"predecessor-version":[{"id":181605,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/170848\/revisions\/181605"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=170848"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=170848"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=170848"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}