3.2 Features Kernel Patch A Trusted Kernel Capability configuration Seal the kernel Lightweight MAC in the kernel File protection process protection module protection Admin tools lidsadm & lidsconf ipchains likely rules