Fixes: 537ae029 ("update version, revrite config files, use zstd compression for kernel")
It is enabled on i686 and arm64.
Thanks to betcher@ for noting this.
Lockdown is a useful and needed thing, thanks to consta@ for ideas about it.
Other LSMs may also be useful (nowadays multiple LSMs can be enabled, so enable as many as possible so thet users sould use them).
Answered with default values to most questions.
Reporting of granted accesses (CONFIG_SECURITY_SMACK_BRINGUP) and packet marking (CONFIG_SECURITY_SMACK_NETFILTER) in SMACK were enbaled
for debug and because it may be potentially useful. We do not have plans to use SMACK for now by default.
CONFIG_SYSFB_SIMPLEFB and CONFIG_FB_SIMPLEDRM are mutually exclusive (since kernel 5.15),
CONFIG_SYSFB_SIMPLEFB was disabled but CONFIG_FB_SIMPLEDRM was not enabled instead of it.
Enable CONFIG_FB_SIMPLEDRM as an old, less experimental solution.
(See also: https://wiki.gentoo.org/wiki/NVIDIA/nvidia-drivers -> enable simple framebuffer)
CONFIG_FB_SIMPLE was Y, but let's try to build it as a module (M).
We should try to reduce the size of vmlinuz for better support of PXE etc.
CONFIG_BLK_DEV_NULL_BLK can be N/Y and cannot be M. It is needed for tests, not for production, disabling it.
Other changes were generated automatically.
