kernel - Implement support for SMAP and SMEP security (2)