Lockdown

[pyllyukko]

• https://www.kernel.org/doc/html/latest/admin-guide/kernel-parameters.html
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=aefcf2f4b58155d27340ba5f9ddbe9513da8286d

lockdown=       [SECURITY]
                { integrity | confidentiality }
                Enable the kernel lockdown feature. If set to
                integrity, kernel features that allow userland to
                modify the running kernel are disabled. If set to
                confidentiality, kernel features that allow userland
                to extract confidential information from the kernel
                are also disabled.