aufs3 support
inotify support for hardened profile