A small Go loader that compiles, attaches, and pins eBPF LSM programs to
prevent modules from loading when the bpf program is loaded. This will prevent
a lot of kernel attacks on modules that we do not use at all.
Updated 2026年07月01日 20:33:43 +02:00