Thanks to @vobst for the idea

Thanks to @izh1979 for the idea

Thanks to @izh1979 for the idea

Thanks to @izh1979 for the idea

Thanks to @izh1979 for the idea

Disabling kernel modules is a radical method to cut the kernel attack
surface. It may be useful for some systems.

Quoting CLIP OS recommendation:
```
Disable module loading once systemd has loaded the ones required for the
running machine according to a profile.
```

--kernel-version option will extract the version in /proc/version.
This is especially useful on embedded systems where config.gz doesn't
always contain the kernel version

Signed-off-by: Fabrice Fontaine <fabrice.fontaine@orange.com>

Use 'cut_attack_surface'.

Don't require slab_common.usercopy_fallback=0,
since HARDENED_USERCOPY_FALLBACK was removed in Linux v5.16

Thanks, @SuperSandro2000 

This is guaranteed to work everything including NixOS

This option isn't worth the performance impact.

Refers to #82.