# CONFIGs
-# Linux/i386 5.4.0 Kernel Configuration
+# Linux/i386 5.14.0 Kernel Configuration
# Report BUG() conditions and kill the offending process.
CONFIG_BUG=y
# Randomize position of kernel.
CONFIG_RANDOMIZE_BASE=y
+# Randomize kernel stack offset on syscall entry (since v5.13).
+CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y
+
# Enable Kernel Page Table Isolation to remove an entire class of cache timing side-channels.
CONFIG_PAGE_TABLE_ISOLATION=y