Editing Loadable kernel module (section)

=== Linux ===
Linux allows disabling module loading via [[sysctl]] option <code>/proc/sys/kernel/modules_disabled</code>.<ref>{{cite web|title=Sysctl/kernel.txt|url=https://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git;a=blob;f=Documentation/sysctl/kernel.txt;hb=HEAD|archive-url=https://archive.today/20130415070311/http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git;a=blob;f=Documentation/sysctl/kernel.txt;hb=HEAD|url-status=dead|archive-date=April 15, 2013|access-date=January 4, 2013}}</ref><ref>{{cite web
 | url = https://outflux.net/blog/archives/2012/11/28/clean-module-disabling/
 | title = Clean module disabling
 | date = 2012-11-28
 | access-date = 2020-10-05
 | author = Kees Cook
 | publisher = outflux.net
 }}</ref>  An [[initial ramdisk|initramfs]] system may load specific modules needed for a machine at boot and then disable module loading.  This makes the security very similar to a monolithic kernel.  If an attacker can change the initramfs, they can change the kernel binary.