And a bunch of kernel patches to: * disable access to various /proc/sys that reveal various kernel addresses * randomize TCP ICN * disable hibernate/sleep *

And a bunch of kernel patches to: * disable access to various /proc/sys that reveal various kernel addresses * randomize TCP ICN * disable hibernate/sleep * no container, Docker, LXR, nor KVM support; just the QEMU without direct machine code execute. That’s is just scratching the surface.