+#
+# Calling the SysctlCheck class constructor:
+# SysctlCheck(reason, decision, name, expected)
+
+ l += [SysctlCheck('self_protection', 'kspp', 'net.core.bpf_jit_harden', '2')]
+
+ l += [SysctlCheck('self_protection', 'kspp', 'kernel.dmesg_restrict', '1')]