# Disables kexec which can be used to replace the running kernel 
kernel.kexec_load_disabled=1