"Linux Kernel Finally Gets Its Lockdown"

Quote:

There are two lockdown modes: integrity and confidentiality

https://itsfoss.com/linux-kernel-5-4/Quote:

In news that has been a long time in coming, chief Linux maintainer Linus Torvalds has finally approved a new security feature, the Linux Security Module (LSM, nicknamed "lockdown") to be part of the 5.4 branch of the Linux kernel. Although the feature will be turned off by default - out of fear it might break existing systems - it does promise to bring additional security to one of the most widely-used and hardened kernels on the market. How Does It Work? The lockdown feature's aim is to restrict various pieces of kernel functionality. ...

https://thenewstack.io/linux-kernel-...-its-lockdown/

More tools for servers, any thoughts?