* Add CVE-2021-33909 mitigations kernel.unprivileged_bpf_disabled: 1 kernel.unprivileged_userns_clone: 0 The first one is also used by Tails. Signed-off-by: Paweł Krawczyk <[email protected]> * Clean up whitespaces Signed-off-by: Paweł Krawczyk <[email protected]>