This is guaranteed to work everything including NixOS

This option isn't worth the performance impact.

Refers to #82.

**kconfig-hardened-check** is a tool for checking the security hardening
options of the Linux kernel.

In addition to Kconfig options, it now can check kernel cmdline
arguments and sysctl parameters.

It's time to give this project a new name that describes it better:
**kernel-hardening-checker**.

AND(AND()), OR(OR()) are not supported intentionally.

(The nested AND/OR should be tested separately, stay tuned)

This rewrites the commit aa7e1bff.

Refers to #86.

Shows OK in green and FAIL in red

Thanks to @frakman1.

Refers to #81. Needs fixing `test_stdout()` in the unit-test.

By the way, don't add `if arch` for checks that require 'is not set'
(there is nothing wrong with that).

Drop `> /dev/null` for non-verbose output of the tool.

It always runs as a main program.

This file was made with root privileges, so it has a full list of sysctls.

The GitHub Actions virtual machine has such a sysctl:
  fs.binfmt_misc.llvm-14-runtime/binfmt = enabled

This example shows that sysctl names may contain the / symbol.