Modulejail: Shrink a Linux kernel-module attack surface by blacklisting modules
github.com