ModuleJail Blocks Unused Linux Kernel Modules to Limit Attack Surface

ModuleJail is a new project that blacklists unused Linux kernel modules, helping reduce the attack surface exposed by recent local privilege escalation flaws.