Loose system startup dependency
Protect /proc/kallsyms

This change should really done in a better way since it does not
directly belong to selinux.
Add sysctl configurations