RE: [HowTo] modulejail

Support AUR
1

Hi andreas85:

I just installed kernel 7.1-rc7 and upon restart, modulejail blocked the r8169 driver from being loaded. This behavior did not occur with kernel 7.0.12 and lower. I had to add realtek to the whitelist. It is possible it will work fine when Manjaro 7.1 Kernel is released as that seems imminent???

Anyway, I just wanted to give a heads up as I could not reply to the thread as it is locked.

Network:
  Device-1: Realtek RTL8111/8168/8211/8411 PCI Express Gigabit Ethernet
    driver: r8169
  IF: enp1s0 state: up speed: 1000 Mbps duplex: full mac: b0:41:6f:09:d5:99
  Device-2: Intel Wi-Fi 6 AX200 driver: iwlwifi
  IF: wlan0 state: down mac: ac:5a:fc:a5:8f:16
3

The r8169 driver likely wasn’t loaded when you ran modulejail. That is specific to your hardware. You really need to make sure you only run modulejail when your system is in full use; that way, this won’t happen.

Depending on the system and usage, certain modules may be needed later on. That is, after all, the reason the kernel has loadable modules :wink:

Modulejail is a truly advanced defense method

against kernel module vulnerabilities. However, anyone using it really can’t avoid creating and maintaining a whitelist for their own system(s).

:footprints:

2 Likes