kernel recompilation for better hardening

A post was split to a new topic: kernel.deny_new_usb sysctl to deny new USB devices