enforce kernel version setting, binfmt_script