VoidHeart — A Linux Kernel Module that intercepts mount, rename, and unlink syscalls to prevent from doing this shit, destruction, and change. Inspired by a heart that refuses to forget working lkm for versions like 4.x linux kernels :)
I have used return -EPERM to genreate errors like permission denied blocking further access to it in my hook easy blocked execution of: 1.mount syscall — blocks mounting of filesystems
2.rename syscall — blocks renaming or moving files
3.unlink syscall — blocks deleting/removing files
4.unlinkat syscall — blocks deleting files relative to a directory file descriptor also it can hide from lsmod
Maded for fun :)
SS:
