Take some ideas from NixOS/nixpkgs hardened kernel config
-rw-r--r-- 35147 LICENSE
-rw-r--r-- 16896 README.md
drwxr-xr-x - config_files
-rwxr-xr-x 28734 kconfig-hardened-check.py