-# Non-executable pages
-#
-CONFIG_PAX_NOEXEC=y
-CONFIG_PAX_PAGEEXEC=y
-CONFIG_PAX_EMUTRAMP=y
-CONFIG_PAX_MPROTECT=y
-# CONFIG_PAX_MPROTECT_COMPAT is not set
-CONFIG_PAX_ELFRELOCS=y
-
-#
-# Address Space Layout Randomization
-#
-CONFIG_PAX_RANDKSTACK=y
-
-#
-# Miscellaneous hardening features
-#
-CONFIG_PAX_MEMORY_STACKLEAK=y
-CONFIG_PAX_REFCOUNT=y
-# CONFIG_PAX_USERCOPY_DEBUG is not set
-# CONFIG_PAX_SIZE_OVERFLOW is not set
-
-#
-# Memory Protections
-#
-# CONFIG_GRKERNSEC_IO is not set
-
-#
-# Kernel Auditing
-#
-CONFIG_GRKERNSEC_RWXMAP_LOG=y
-
-#
-# Executable Protections
-#
-CONFIG_GRKERNSEC_SETXID=y
-
-#
-# Logging Options