name=kexec-hardened

[sysctl]
kernel.kexec_load_disabled=1
