This will present an update on development over the last year (and quick demos of new features) of several smaller Linux kernel security areas: the seccomp syscall filtering subsystem, the Yama ptrace-restriction LSM, and the LoadPin kernel-file-reading restriction LSM.