prevent LKM unloading with rmmod

rootkits and EDR software that use LKMs may employ techniques that hide their presence or prevent them from being unloaded–if an attacker manages to root a system, it would be very unfortunate if they could simply “rmmod security_software” then carry out their acts without preventions or detections.

---