Disabled ptrace() by default, through a LSM module.

This should prevent malware from injecting code into existing processes.

Like AppArmor and SELinux, this LSM module can be disabled by appending "rlsd=0" to the kernel command-line. There is no way to turn it off without rebooting, for extra security.