kernel.sysrq = 0

# Memory execution prevention
#kernel.exec-shield = 2
kernel.randomize_va_space=2

kernel.dmesg_restrict = 1
kernel.kptr_restrict = 2

#kernel.kexec_load_disabled = 1