CONFIG_ARCH_MMAP_RND_BITS_MIN=28

CONFIG_ARCH_MMAP_RND_BITS_MIN=27

CONFIG_ARCH_MMAP_RND_BITS_MAX=32

CONFIG_ARCH_MMAP_RND_BITS_MAX=27

--

CONFIG_LOCALVERSION="-161024_12"

CONFIG_LOCALVERSION="-161024_09"

--

CONFIG_ARCH_MMAP_RND_BITS=28

CONFIG_ARCH_MMAP_RND_BITS=27

--

CONFIG_TASK_SIZE_MAX_SHIFT=47

CONFIG_PAX_PER_CPU_PGD=y

--

CONFIG_TASK_SIZE_MAX_SHIFT=42

CONFIG_PAX_USERCOPY_SLABS=y

# CONFIG_PAX is not set

CONFIG_PAX=y

# CONFIG_PAX_NO_ACL_FLAGS is not set

--

#

# PaX Control

#

# CONFIG_PAX_SOFTMODE is not set

# CONFIG_PAX_PT_PAX_FLAGS is not set

CONFIG_PAX_XATTR_PAX_FLAGS=y

CONFIG_PAX_NO_ACL_FLAGS=y

# CONFIG_PAX_KERNEXEC_PLUGIN_METHOD_BTS is not set

CONFIG_PAX_KERNEXEC_PLUGIN_METHOD_BTS=y

--

# CONFIG_PAX_MEMORY_STACKLEAK is not set

CONFIG_PAX_MEMORY_STACKLEAK=y

# CONFIG_PAX_MEMORY_STRUCTLEAK is not set

CONFIG_PAX_MEMORY_STRUCTLEAK=y

--

# CONFIG_PAX_REFCOUNT is not set

CONFIG_PAX_REFCOUNT=y

# CONFIG_PAX_USERCOPY is not set

CONFIG_PAX_CONSTIFY_PLUGIN=y

# CONFIG_PAX_SIZE_OVERFLOW is not set

CONFIG_PAX_USERCOPY=y

--

# CONFIG_PAX_USERCOPY_DEBUG is not set

CONFIG_PAX_SIZE_OVERFLOW=y

CONFIG_PAX_SIZE_OVERFLOW_EXTRA=y

# CONFIG_PAX_LATENT_ENTROPY is not set

CONFIG_PAX_LATENT_ENTROPY=y

# CONFIG_PAX_RAP is not set

CONFIG_PAX_RAP=y

--

# CONFIG_GRKERNSEC_BPF_HARDEN is not set

CONFIG_GRKERNSEC_BPF_HARDEN=y

# CONFIG_GRKERNSEC_PERF_HARDEN is not set

CONFIG_GRKERNSEC_PERF_HARDEN=y

# CONFIG_GRKERNSEC_KSTACKOVERFLOW is not set

# CONFIG_GRKERNSEC_RAND_THREADSTACK is not set

# CONFIG_GRKERNSEC_BRUTE is not set

CONFIG_GRKERNSEC_PROC_MEMMAP=y

# CONFIG_GRKERNSEC_MODHARDEN is not set

CONFIG_GRKERNSEC_KSTACKOVERFLOW=y

# CONFIG_GRKERNSEC_HIDESYM is not set

CONFIG_GRKERNSEC_BRUTE=y

# CONFIG_GRKERNSEC_RANDSTRUCT is not set

CONFIG_GRKERNSEC_MODHARDEN=y

# CONFIG_GRKERNSEC_KERN_LOCKOUT is not set

CONFIG_GRKERNSEC_HIDESYM=y

--

CONFIG_GRKERNSEC_RANDSTRUCT=y

CONFIG_GRKERNSEC_RANDSTRUCT_PERFORMANCE=y

CONFIG_GRKERNSEC_KERN_LOCKOUT=y

# CONFIG_GRKERNSEC_ACL_HIDEKERN is not set

CONFIG_GRKERNSEC_ACL_HIDEKERN=y

--

# CONFIG_GRKERNSEC_PROC is not set

CONFIG_GRKERNSEC_PROC=y

# CONFIG_GRKERNSEC_LINK is not set

CONFIG_GRKERNSEC_PROC_USER=y

# CONFIG_GRKERNSEC_SYMLINKOWN is not set

CONFIG_GRKERNSEC_PROC_ADD=y

# CONFIG_GRKERNSEC_FIFO is not set

CONFIG_GRKERNSEC_LINK=y

# CONFIG_GRKERNSEC_SYSFS_RESTRICT is not set

CONFIG_GRKERNSEC_SYMLINKOWN=y

--

CONFIG_GRKERNSEC_FIFO=y

CONFIG_GRKERNSEC_SYSFS_RESTRICT=y

# CONFIG_GRKERNSEC_DEVICE_SIDECHANNEL is not set

CONFIG_GRKERNSEC_DEVICE_SIDECHANNEL=y

# CONFIG_GRKERNSEC_CHROOT is not set

CONFIG_GRKERNSEC_CHROOT=y

--

CONFIG_GRKERNSEC_CHROOT_MOUNT=y

CONFIG_GRKERNSEC_CHROOT_DOUBLE=y

CONFIG_GRKERNSEC_CHROOT_PIVOT=y

CONFIG_GRKERNSEC_CHROOT_CHDIR=y

CONFIG_GRKERNSEC_CHROOT_CHMOD=y

CONFIG_GRKERNSEC_CHROOT_FCHDIR=y

CONFIG_GRKERNSEC_CHROOT_MKNOD=y

CONFIG_GRKERNSEC_CHROOT_SHMAT=y

CONFIG_GRKERNSEC_CHROOT_UNIX=y

CONFIG_GRKERNSEC_CHROOT_FINDTASK=y

CONFIG_GRKERNSEC_CHROOT_NICE=y

CONFIG_GRKERNSEC_CHROOT_SYSCTL=y

CONFIG_GRKERNSEC_CHROOT_RENAME=y

CONFIG_GRKERNSEC_CHROOT_CAPS=y

# CONFIG_GRKERNSEC_CHROOT_INITRD is not set

# CONFIG_GRKERNSEC_EXECLOG is not set

CONFIG_GRKERNSEC_EXECLOG=y

# CONFIG_GRKERNSEC_RESLOG is not set

CONFIG_GRKERNSEC_RESLOG=y

# CONFIG_GRKERNSEC_CHROOT_EXECLOG is not set

CONFIG_GRKERNSEC_CHROOT_EXECLOG=y

# CONFIG_GRKERNSEC_AUDIT_PTRACE is not set

CONFIG_GRKERNSEC_AUDIT_PTRACE=y

# CONFIG_GRKERNSEC_AUDIT_CHDIR is not set

CONFIG_GRKERNSEC_AUDIT_CHDIR=y

# CONFIG_GRKERNSEC_AUDIT_MOUNT is not set

CONFIG_GRKERNSEC_AUDIT_MOUNT=y

# CONFIG_GRKERNSEC_SIGNAL is not set

CONFIG_GRKERNSEC_SIGNAL=y

# CONFIG_GRKERNSEC_FORKFAIL is not set

CONFIG_GRKERNSEC_FORKFAIL=y

# CONFIG_GRKERNSEC_TIME is not set

CONFIG_GRKERNSEC_TIME=y

# CONFIG_GRKERNSEC_PROC_IPADDR is not set

CONFIG_GRKERNSEC_PROC_IPADDR=y

--

CONFIG_GRKERNSEC_RWXMAP_LOG=y

# CONFIG_GRKERNSEC_DMESG is not set

CONFIG_GRKERNSEC_DMESG=y

# CONFIG_GRKERNSEC_HARDEN_PTRACE is not set

CONFIG_GRKERNSEC_HARDEN_PTRACE=y

# CONFIG_GRKERNSEC_PTRACE_READEXEC is not set

CONFIG_GRKERNSEC_PTRACE_READEXEC=y

# CONFIG_GRKERNSEC_SETXID is not set

CONFIG_GRKERNSEC_SETXID=y

# CONFIG_GRKERNSEC_HARDEN_IPC is not set

CONFIG_GRKERNSEC_HARDEN_IPC=y

# CONFIG_GRKERNSEC_HARDEN_TTY is not set

CONFIG_GRKERNSEC_HARDEN_TTY=y

# CONFIG_GRKERNSEC_TPE is not set

CONFIG_GRKERNSEC_TPE=y

--

CONFIG_GRKERNSEC_TPE_ALL=y

# CONFIG_GRKERNSEC_TPE_INVERT is not set

CONFIG_GRKERNSEC_TPE_GID=100

# CONFIG_GRKERNSEC_BLACKHOLE is not set

CONFIG_GRKERNSEC_BLACKHOLE=y

# CONFIG_GRKERNSEC_NO_SIMULT_CONNECT is not set

CONFIG_GRKERNSEC_NO_SIMULT_CONNECT=y

--

# CONFIG_GRKERNSEC_SYSCTL is not set

CONFIG_GRKERNSEC_SYSCTL=y

--

CONFIG_GRKERNSEC_SYSCTL_ON=y