remove fdir sysctls
improve permission check