rfxn / advanced-policy-firewall

Advanced Policy Firewall (APF)
GNU General Public License v2.0
93 stars 46 forks source link

Attempt to load rules even if monokern #43

Closed nexnwelch closed 3 years ago

nexnwelch commented 3 years ago

With SET_MONOKERN enabled we skip loading a bunch of kernel modules that do not seem to be present in some MONOKERN kernels. For example the 4.19.113-300.el7.x86_64 altarch kernel for CentOS 7 does not have a ip_tables module but has a bunch of the modules in modlist as individual modules. Thus setting SET_MONOKERN to 1 we skip a bunch of these useful modules.