Merge "defconfig: Add kernel hardening features"

CONFIG_BLK_DEV_INITRD=y

CONFIG_KALLSYMS_ALL=y

# CONFIG_COMPAT_BRK is not set

CONFIG_SLAB_FREELIST_RANDOM=y

CONFIG_SLAB_FREELIST_HARDENED=y

# CONFIG_SHUFFLE_PAGE_ALLOCATOR is not set

CONFIG_PROFILING=y

CONFIG_ARM64_VA_BITS_48=y

CONFIG_SCHED_MC=y

CONFIG_ROOT_NFS=y

CONFIG_NLS_CODEPAGE_437=y

CONFIG_NLS_ISO8859_1=y

CONFIG_SECURITY_PERF_EVENTS_RESTRICT=y

CONFIG_SECURITY=y

CONFIG_HARDENED_USERCOPY=y

# CONFIG_HARDENED_USERCOPY_FALLBACK is not set

CONFIG_FORTIFY_SOURCE=y

CONFIG_CRYPTO_AUTHENC=m

CONFIG_CRYPTO_ECDH=m

CONFIG_CRYPTO_ECHAINIV=y

CONFIG_DEBUG_KERNEL=y

# CONFIG_SCHED_DEBUG is not set

# CONFIG_DEBUG_PREEMPT is not set

CONFIG_DEBUG_CREDENTIALS=y

# CONFIG_FTRACE is not set

CONFIG_MEMTEST=y

CONFIG_BUG_ON_DATA_CORRUPTION=y