Linux 5.4 makes it much more difficult for compromised root accounts to compromise Linux systems.

Linux 5.4 includes an optional Linux Security Module (LSM) called kernel lockdown mode which prevents the system's root account from altering the kernel code in some instances.