-# CONFIGs
-# Linux/arm64 5.17.0 Kernel Configuration
+# Linux/arm64 6.1.5 Kernel Configuration
# Report BUG() conditions and kill the offending process.
CONFIG_BUG=y
# Randomize position of kernel (requires UEFI RNG or bootloader support for /chosen/kaslr-seed DT property).
CONFIG_RANDOMIZE_BASE=y
+# Remove arm32 support to reduce syscall attack surface.
+# CONFIG_COMPAT is not set
+
# Make sure PAN emulation is enabled.
CONFIG_ARM64_SW_TTBR0_PAN=y