Enable and Disable File Path Checking on Kernel Module Loads

If kernel module protection is enabled, you can also enable file path checking on kernel module loading. When this is enabled,  checks that the kernel module to be loaded matches the filepath property of the KMODULE record (for non-Linux systems), or matches the signature of the KMODULE record (for Linux systems).
capamsc141
If kernel module protection is enabled, you can also enable file path checking on kernel module loading. When this is enabled, 
PAM Server Control
checks that the kernel module to be loaded matches the filepath property of the KMODULE record (for non-Linux systems), or matches the signature of the KMODULE record (for Linux systems).
To enable file path checking, set the special_check token to yes in the seosd section of the configuration file seos.ini. The default is no.
PAM Server Control
 does file path checking only if file path checking and kernel mode protection are both enabled.
Example: Enable File Path Checking for Kernel Module Loads Using the seini Utility
To enable file path checking for kernel module loads, you can use the seini and secons utilities as follows:
seini -s seosd.special_check yes secons -rl