Enable and Disable Kernel Module Protection

When kernel module protection is enabled,  checks the loading and unloading of the kernel modules that are defined in the database.
capamsc141
When kernel module protection is enabled, 
PAM Server Control
checks the loading and unloading of the kernel modules that are defined in the database.
By default, 
PAM Server Control
enables protection of kernel modules.
To enable or disable kernel mode protection, enable or disable the KMODULE class. For example, use the setoptions command.
Example: Enable Kernel Mode Protection Using selang
The following selang command enables kernel mode protection:
setoptions class+(kmodule)
Example: Disable Kernel Mode Protection Using selang
The following selang command disables kernel mode protection:
setoptions class-(KMODULE)