LOCKDOWN_DEVICE_TREE
rv = security_locked_down(LOCKDOWN_DEVICE_TREE);
[LOCKDOWN_DEVICE_TREE] = "modifying device tree contents",