This means we can begin testing whether TOMOYO is fit for purpose when it comes to "sealing" /.moss and /usr, so only moss can manipulate the sealed FS paths when TOMOYO is active with a pre-configured policy.
Removed a bunch of PCMCIA, WiFi, USB and Ethernet drivers since this is supposed to be a KVM kernel.
Tweaked a few security settings that may impact performance, but will also mitigate exploits.
Turned on a few CPU settings related to power management and such.
This means we can begin testing whether TOMOYO is fit for purpose when it comes to "sealing" /.moss and /usr, so only moss can manipulate the sealed FS paths when TOMOYO is active with a pre-configured policy.