avoid leaking kernel address information to userspace by using

set this option to avoid leaking kernel addresses to userland. (bnc#833774) 


kernel.kptr_restrict=1 sysctl