1. (then reboot if kernel has been patched)