moved confine :kernel, was executing on linux host