Checking for kernel module rootkits

Section heading:

[Kernel]

Entries:

KernelCheckActive=1/0 — '1' to switch on, '0' to switch off.

KernelCheckInterval=seconds — Interval between checks.

SeverityKernel=severity — Severity for events.