lock_kernel_down
err = lock_kernel_down("securityfs", level);
lock_kernel_down("command line", LOCKDOWN_INTEGRITY_MAX);
lock_kernel_down("command line", LOCKDOWN_CONFIDENTIALITY_MAX);
lock_kernel_down("Kernel configuration", LOCKDOWN_INTEGRITY_MAX);
lock_kernel_down("Kernel configuration", LOCKDOWN_CONFIDENTIALITY_MAX);