kernel.modules_disabled=1
kernel.sysrq = 0