kernel.sysrq = 0
# Memory execution prevention
kernel.exec-shield = 2
kernel.randomize_va_space=2
kernel.dmesg_restrict = 1
kernel.kptr_restrict = 2
kernel.kexec_load_disabled = 1