Extra Chroot protection in SUSE kernels?