kmod-nokeyctl

Simple kernel module which disables the keyctl(2) system call to workaround CVE-2016-0728 on vulnerable systems without rebooting until a proper patch can be applied.

Usage

$ ./configure
$ make
$ sudo -i insmod "$(pwd)/nokeyctl.ko"

Verification

$ sudo dmesg
...
[2811856.665590] [nokeyctl] keyctl syscall disabled

Removal

$ sudo -i rmmod nokeyctl