Security News > 2020 > April > How to secure a Kubernetes cluster by preventing unwanted modules from loading
2020-04-09 20:33
One very crucial task you can undertake is to prevent unwanted kernel modules from loading on your containers.
You'd be surprised at how many modules load at boot-many of them you probably don't need to be using within your containers.
What we are going to do is blacklist the modules we don't want loading in our containers.
Figure A. Comb through that list and find all of the modules you don't want loading into the kernel of your container.
You should be able to stop and start the container and see those blacklisted modules no longer loading.