microvm-analysis.txt

"device stuff"
< CONFIG_GENERIC_ISA_DMA=y
< CONFIG_ARCH_MAY_HAVE_PC_FDC=y
< CONFIG_PCSPKR_PLATFORM=y
< CONFIG_ZONE_DMA=y
< CONFIG_DMI=y
< CONFIG_ZONE_DMA_FLAG=1
< CONFIG_BOUNCE=y
< CONFIG_CLEANCACHE=y
< CONFIG_FRONTSWAP=y
< CONFIG_ZSWAP=y
< CONFIG_ZPOOL=y
< CONFIG_MTRR=y
< CONFIG_MTRR_SANITIZER=y
< CONFIG_MTRR_SANITIZER_ENABLE_DEFAULT=0
< CONFIG_MTRR_SANITIZER_SPARE_REG_NR_DEFAULT=1
< CONFIG_PCI_LABEL=y
< CONFIG_ISA_DMA_API=y
< CONFIG_DEVTMPFS=y
< CONFIG_DEVTMPFS_MOUNT=y
< CONFIG_FW_LOADER=y
< CONFIG_FIRMWARE_IN_KERNEL=y
< CONFIG_EXTRA_FIRMWARE=""
< CONFIG_BACKLIGHT_LCD_SUPPORT=y
< CONFIG_DMADEVICES=y
< CONFIG_AUXDISPLAY=y
< CONFIG_X86_PLATFORM_DEVICES=y
< CONFIG_MAILBOX=y
< CONFIG_IOMMU_SUPPORT=y
< CONFIG_I8253_LOCK=y
< CONFIG_HIGH_RES_TIMERS=y
< CONFIG_SCHED_HRTICK=y

"debugging stuff"
< CONFIG_GENERIC_BUG=y
< CONFIG_GENERIC_BUG_RELATIVE_POINTERS=y
< CONFIG_RCU_STALL_COMMON=y
< CONFIG_LOG_CPU_MAX_BUF_SHIFT=12
< CONFIG_RELAY=y
< CONFIG_KALLSYMS=y
< CONFIG_BUG=y
< CONFIG_ELF_CORE=y
< CONFIG_SLUB_DEBUG=y
< CONFIG_KPROBES=y
< CONFIG_OPTPROBES=y
< CONFIG_KRETPROBES=y
< CONFIG_KVM_DEBUG_FS=y
< CONFIG_X86_CHECK_BIOS_CORRUPTION=y
< CONFIG_X86_BOOTPARAM_MEMORY_CORRUPTION_CHECK=y
< CONFIG_CORE_DUMP_DEFAULT_ELF_HEADERS=y
< CONFIG_COREDUMP=y
< CONFIG_ALLOW_DEV_COREDUMP=y
< CONFIG_FIRMWARE_MEMMAP=y
< CONFIG_PRINTK_TIME=y
< CONFIG_DYNAMIC_DEBUG=y
< CONFIG_ENABLE_WARN_DEPRECATED=y
< CONFIG_DEBUG_FS=y
< CONFIG_DEBUG_SECTION_MISMATCH=y
< CONFIG_FRAME_POINTER=y
< CONFIG_MAGIC_SYSRQ=y
< CONFIG_MAGIC_SYSRQ_DEFAULT_ENABLE=0x1
< CONFIG_DEBUG_MEMORY_INIT=y
< CONFIG_DEBUG_STACKOVERFLOW=y
< CONFIG_HAVE_ARCH_KASAN=y
< CONFIG_KASAN_SHADOW_OFFSET=0xdffffc0000000000
< CONFIG_STACKTRACE=y
< CONFIG_DEBUG_BUGVERBOSE=y
< CONFIG_DEBUG_LIST=y
< CONFIG_RCU_CPU_STALL_TIMEOUT=59
< CONFIG_RCU_CPU_STALL_INFO=y
< CONFIG_STRICT_DEVMEM=y
< CONFIG_X86_VERBOSE_BOOTUP=y
< CONFIG_DEBUG_RODATA=y
< CONFIG_DOUBLEFAULT=y

"informational"
< CONFIG_AUDIT=y
< CONFIG_AUDITSYSCALL=y
< CONFIG_AUDIT_WATCH=y
< CONFIG_AUDIT_TREE=y
< CONFIG_BSD_PROCESS_ACCT=y
< CONFIG_BSD_PROCESS_ACCT_V3=y
< CONFIG_TASKSTATS=y
< CONFIG_TASK_DELAY_ACCT=y
< CONFIG_TASK_XACCT=y
< CONFIG_TASK_IO_ACCOUNTING=y
< CONFIG_VM_EVENT_COUNTERS=y
< CONFIG_PROFILING=y
< CONFIG_SLABINFO=y
< CONFIG_ARCH_PROC_KCORE_TEXT=y
< CONFIG_CONNECTOR=y
< CONFIG_PROC_EVENTS=y
< CONFIG_DMIID=y
< CONFIG_DMI_SCAN_MACHINE_NON_EFI_FALLBACK=y
< CONFIG_PROC_KCORE=y
< CONFIG_PROC_PAGE_MONITOR=y
< CONFIG_SYSFS=y
< CONFIG_NLS=y
< CONFIG_NLS_DEFAULT="utf8"

"multiprocessing stuff"
< CONFIG_X86_64_SMP=y
< CONFIG_X86_HT=y
< CONFIG_SYSVIPC=y
< CONFIG_SYSVIPC_SYSCTL=y
< CONFIG_POSIX_MQUEUE=y
< CONFIG_POSIX_MQUEUE_SYSCTL=y
< CONFIG_CROSS_MEMORY_ATTACH=y
< CONFIG_TREE_RCU=y
< CONFIG_RCU_FANOUT=64
< CONFIG_RCU_FANOUT_LEAF=16
< CONFIG_NUMA_BALANCING=y
< CONFIG_CGROUPS=y
< CONFIG_CGROUP_FREEZER=y
< CONFIG_CGROUP_DEVICE=y
< CONFIG_CPUSETS=y
< CONFIG_PROC_PID_CPUSET=y
< CONFIG_CGROUP_CPUACCT=y
< CONFIG_PAGE_COUNTER=y
< CONFIG_MEMCG=y
< CONFIG_MEMCG_SWAP=y
< CONFIG_MEMCG_SWAP_ENABLED=y
< CONFIG_MEMCG_KMEM=y
< CONFIG_CGROUP_HUGETLB=y
< CONFIG_CGROUP_PERF=y
< CONFIG_CGROUP_SCHED=y
< CONFIG_FAIR_GROUP_SCHED=y
< CONFIG_CFS_BANDWIDTH=y
< CONFIG_RT_GROUP_SCHED=y
< CONFIG_BLK_CGROUP=y
< CONFIG_NAMESPACES=y
< CONFIG_UTS_NS=y
< CONFIG_IPC_NS=y
< CONFIG_USER_NS=y
< CONFIG_PID_NS=y
< CONFIG_NET_NS=y
< CONFIG_SCHED_AUTOGROUP=y
< CONFIG_SLUB_CPU_PARTIAL=y
< CONFIG_RT_MUTEXES=y
< CONFIG_STOP_MACHINE=y
< CONFIG_BLK_DEV_THROTTLING=y
< CONFIG_IOSCHED_DEADLINE=y
< CONFIG_IOSCHED_CFQ=y
< CONFIG_DEFAULT_CFQ=y
< CONFIG_DEFAULT_IOSCHED="cfq"
< CONFIG_UNINLINE_SPIN_UNLOCK=y
< CONFIG_MUTEX_SPIN_ON_OWNER=y
< CONFIG_RWSEM_SPIN_ON_OWNER=y
< CONFIG_LOCK_SPIN_ON_OWNER=y
< CONFIG_QUEUE_RWLOCK=y
< CONFIG_SMP=y
< CONFIG_SCHED_OMIT_FRAME_POINTER=y
< CONFIG_PARAVIRT_SPINLOCKS=y
< CONFIG_NR_CPUS=128
< CONFIG_SCHED_SMT=y
< CONFIG_SCHED_MC=y
< CONFIG_NUMA=y
< CONFIG_NODES_SHIFT=10
< CONFIG_NEED_MULTIPLE_NODES=y
< CONFIG_MIGRATION=y
< CONFIG_ARCH_ENABLE_HUGEPAGE_MIGRATION=y
< CONFIG_KSM=y
< CONFIG_USE_PERCPU_NUMA_NODE_ID=y
< CONFIG_CPU_RMAP=y

"not systems"
< CONFIG_SWAP=y
< CONFIG_ASN1=y
< CONFIG_COMPACTION=y
< CONFIG_RELOCATABLE=y
< CONFIG_BLK_DEV_LOOP=y
< CONFIG_BLK_DEV_LOOP_MIN_COUNT=8
< CONFIG_SHMEM=y

"single security domain"
< CONFIG_SYSTEM_TRUSTED_KEYRING=y
< CONFIG_SECCOMP_FILTER=y
< CONFIG_SECCOMP=y

"app specific"
< CONFIG_FHANDLE=y
< CONFIG_BPF=y
< CONFIG_FUTEX=y
< CONFIG_EPOLL=y
< CONFIG_SIGNALFD=y
< CONFIG_TIMERFD=y
< CONFIG_EVENTFD=y
< CONFIG_AIO=y
< CONFIG_ADVISE_SYSCALLS=y
< CONFIG_X86_MSR=y
< CONFIG_X86_CPUID=y
< CONFIG_FILE_LOCKING=y
< CONFIG_FSNOTIFY=y
< CONFIG_INOTIFY_USER=y
< CONFIG_FANOTIFY=y
< CONFIG_PROC_FS=y
< CONFIG_PROC_SYSCTL=y

"interrupts and timers"
< CONFIG_GENERIC_PENDING_IRQ=y
< CONFIG_PARAVIRT_TIME_ACCOUNTING=y

"module stuff"
< CONFIG_MODULES=y
< CONFIG_MODULE_FORCE_LOAD=y
< CONFIG_MODULE_UNLOAD=y
< CONFIG_MODVERSIONS=y
< CONFIG_MODULE_SRCVERSION_ALL=y
< CONFIG_MODULE_SIG=y
< CONFIG_MODULE_SIG_ALL=y
< CONFIG_MODULE_SIG_SHA512=y
< CONFIG_MODULE_SIG_HASH="sha512"

"initrd stuff"
< CONFIG_BLK_DEV_INITRD=y
< CONFIG_INITRAMFS_SOURCE=""
< CONFIG_RD_GZIP=y
< CONFIG_RD_BZIP2=y
< CONFIG_RD_LZMA=y
< CONFIG_RD_XZ=y
< CONFIG_RD_LZO=y
< CONFIG_RD_LZ4=y

"cruft"
< CONFIG_HAVE_UID16=y
< CONFIG_UID16=y
< CONFIG_SGETMASK_SYSCALL=y
< CONFIG_SYSFS_SYSCALL=y
< CONFIG_ARCH_WANT_COMPAT_IPC_PARSE_VERSION=y
< CONFIG_ARCH_WANT_OLD_COMPAT_IPC=y
< CONFIG_OLD_SIGSUSPEND3=y
< CONFIG_COMPAT_OLD_SIGACTION=y
< CONFIG_BLOCK_COMPAT=y
< CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y
< CONFIG_X86_16BIT=y
< CONFIG_X86_ESPFIX64=y
< CONFIG_X86_VSYSCALL_EMULATION=y
< CONFIG_SYSCTL=y
< CONFIG_COMPAT_BINFMT_ELF=y
< CONFIG_IA32_EMULATION=y
< CONFIG_COMPAT=y
< CONFIG_COMPAT_FOR_U64_ALIGNMENT=y
< CONFIG_SYSVIPC_COMPAT=y
< CONFIG_KEYS_COMPAT=y
< CONFIG_UEVENT_HELPER=y
< CONFIG_UEVENT_HELPER_PATH="/sbin/hotplug"
< CONFIG_STAGING=y
< CONFIG_DNOTIFY=y
< CONFIG_UNUSED_SYMBOLS=y
< CONFIG_OPTIMIZE_INLINING=y
< CONFIG_KVM_COMPAT=y
< CONFIG_NO_HZ=y

"space/time tradeoffs"
< CONFIG_BASE_FULL=y
< CONFIG_BASE_SMALL=0
< CONFIG_SPARSEMEM_VMEMMAP=y
< CONFIG_TRANSPARENT_HUGEPAGE=y
< CONFIG_TRANSPARENT_HUGEPAGE_MADVISE=y
< CONFIG_ARCH_RANDOM=y

"block options"
< CONFIG_BLK_DEV_BSG=y
< CONFIG_BLK_DEV_BSGLIB=y
< CONFIG_BLK_DEV_INTEGRITY=y
< CONFIG_BLK_CMDLINE_PARSER=y
< CONFIG_PARTITION_ADVANCED=y

"power management"
< CONFIG_FREEZER=y
< CONFIG_ARCH_HIBERNATION_HEADER=y
< CONFIG_HIBERNATE_CALLBACKS=y
< CONFIG_HIBERNATION=y
< CONFIG_PM_STD_PARTITION=""
< CONFIG_PM_SLEEP=y
< CONFIG_PM_SLEEP_SMP=y
< CONFIG_PM=y
< CONFIG_CPU_FREQ=y
< CONFIG_CPU_FREQ_STAT=y
< CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE=y
< CONFIG_CPU_FREQ_GOV_PERFORMANCE=y
< CONFIG_X86_INTEL_PSTATE=y
< CONFIG_CPU_IDLE=y
< CONFIG_CPU_IDLE_GOV_LADDER=y
< CONFIG_CPU_IDLE_GOV_MENU=y
< CONFIG_INTEL_IDLE=y
< CONFIG_POWER_SUPPLY=y
< CONFIG_POWER_RESET=y
< CONFIG_THERMAL=y
< CONFIG_THERMAL_DEFAULT_GOV_STEP_WISE=y
< CONFIG_THERMAL_GOV_FAIR_SHARE=y
< CONFIG_THERMAL_GOV_STEP_WISE=y
< CONFIG_THERMAL_GOV_USER_SPACE=y

"hotplug"
< CONFIG_ARCH_MEMORY_PROBE=y
< CONFIG_MEMORY_ISOLATION=y
< CONFIG_HAVE_BOOTMEM_INFO_NODE=y
< CONFIG_MEMORY_HOTPLUG=y
< CONFIG_MEMORY_HOTPLUG_SPARSE=y
< CONFIG_MEMORY_HOTREMOVE=y
< CONFIG_HOTPLUG_CPU=y
< CONFIG_ARCH_ENABLE_MEMORY_HOTREMOVE=y

"probably we should have"
< CONFIG_KVM_GUEST=y
< CONFIG_PARAVIRT_CLOCK=y
< CONFIG_DIRECT_GBPAGES=y
< CONFIG_STANDALONE=y
< CONFIG_PREVENT_FIRMWARE_BUILD=y
< CONFIG_VIRT_DRIVERS=y
< CONFIG_STRIP_ASM_SYMS=y

"arch stuff"
< CONFIG_X86_PAT=y
< CONFIG_ARCH_USES_PG_UNCACHED=y
< CONFIG_X86_SMAP=y

"needless generality"
< CONFIG_BINFMT_MISC=y

"networking"
< CONFIG_NET=y
< CONFIG_PACKET=y
< CONFIG_UNIX=y
< CONFIG_XFRM=y
< CONFIG_XFRM_ALGO=y
< CONFIG_XFRM_USER=y
< CONFIG_XFRM_SUB_POLICY=y
< CONFIG_XFRM_MIGRATE=y
< CONFIG_XFRM_STATISTICS=y
< CONFIG_INET=y
< CONFIG_IP_MULTICAST=y
< CONFIG_IP_ADVANCED_ROUTER=y
< CONFIG_IP_MULTIPLE_TABLES=y
< CONFIG_IP_ROUTE_MULTIPATH=y
< CONFIG_IP_ROUTE_VERBOSE=y
< CONFIG_IP_PNP=y
< CONFIG_IP_PNP_DHCP=y
< CONFIG_IP_PNP_BOOTP=y
< CONFIG_IP_PNP_RARP=y
< CONFIG_IP_MROUTE=y
< CONFIG_IP_MROUTE_MULTIPLE_TABLES=y
< CONFIG_IP_PIMSM_V1=y
< CONFIG_IP_PIMSM_V2=y
< CONFIG_SYN_COOKIES=y
< CONFIG_INET_LRO=y
< CONFIG_TCP_CONG_ADVANCED=y
< CONFIG_TCP_CONG_CUBIC=y
< CONFIG_DEFAULT_CUBIC=y
< CONFIG_DEFAULT_TCP_CONG="cubic"
< CONFIG_TCP_MD5SIG=y
< CONFIG_IPV6=y
< CONFIG_IPV6_ROUTER_PREF=y
< CONFIG_IPV6_ROUTE_INFO=y
< CONFIG_IPV6_OPTIMISTIC_DAD=y
< CONFIG_IPV6_MULTIPLE_TABLES=y
< CONFIG_IPV6_SUBTREES=y
< CONFIG_IPV6_MROUTE=y
< CONFIG_IPV6_MROUTE_MULTIPLE_TABLES=y
< CONFIG_IPV6_PIMSM_V2=y
< CONFIG_NETLABEL=y
< CONFIG_NETWORK_SECMARK=y
< CONFIG_NET_PTP_CLASSIFY=y
< CONFIG_NETWORK_PHY_TIMESTAMPING=y
< CONFIG_NETFILTER=y
< CONFIG_NETFILTER_ADVANCED=y
< CONFIG_BRIDGE_NETFILTER=y
< CONFIG_NF_CONNTRACK=y
< CONFIG_NF_LOG_COMMON=y
< CONFIG_NF_CONNTRACK_MARK=y
< CONFIG_NF_CONNTRACK_SECMARK=y
< CONFIG_NF_CONNTRACK_PROCFS=y
< CONFIG_NF_CONNTRACK_EVENTS=y
< CONFIG_NF_CONNTRACK_TIMEOUT=y
< CONFIG_NF_CONNTRACK_TIMESTAMP=y
< CONFIG_NF_CT_PROTO_DCCP=y
< CONFIG_NF_CT_PROTO_SCTP=y
< CONFIG_NF_CT_PROTO_UDPLITE=y
< CONFIG_NETFILTER_SYNPROXY=y
< CONFIG_NETFILTER_XTABLES=y
< CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=y
< CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
< CONFIG_NF_LOG_ARP=y
< CONFIG_NF_LOG_IPV4=y
< CONFIG_NF_REJECT_IPV4=y
< CONFIG_IP_NF_IPTABLES=y
< CONFIG_IP_NF_FILTER=y
< CONFIG_IP_NF_TARGET_REJECT=y
< CONFIG_IP_NF_TARGET_SYNPROXY=y
< CONFIG_IP_NF_MANGLE=y
< CONFIG_STP=y
< CONFIG_BRIDGE=y
< CONFIG_BRIDGE_IGMP_SNOOPING=y
< CONFIG_HAVE_NET_DSA=y
< CONFIG_LLC=y
< CONFIG_NET_SCHED=y
< CONFIG_NET_CLS=y
< CONFIG_NET_EMATCH=y
< CONFIG_NET_EMATCH_STACK=32
< CONFIG_NET_CLS_ACT=y
< CONFIG_NET_SCH_FIFO=y
< CONFIG_DCB=y
< CONFIG_VSOCKETS=y
< CONFIG_RPS=y
< CONFIG_RFS_ACCEL=y
< CONFIG_XPS=y
< CONFIG_CGROUP_NET_PRIO=y
< CONFIG_CGROUP_NET_CLASSID=y
< CONFIG_NET_RX_BUSY_POLL=y
< CONFIG_BQL=y
< CONFIG_BPF_JIT=y
< CONFIG_NET_FLOW_LIMIT=y
< CONFIG_FIB_RULES=y
< CONFIG_ISCSI_TCP=y
< CONFIG_NETDEVICES=y
< CONFIG_NET_CORE=y
< CONFIG_TUN=y
< CONFIG_VETH=y
< CONFIG_VIRTIO_NET=y
< CONFIG_QUOTA_NETLINK_INTERFACE=y
< CONFIG_GENERIC_NET_UTILS=y
< CONFIG_CRC_CCITT=y
< CONFIG_CRC16=y
< CONFIG_CRC_T10DIF=y
< CONFIG_LIBCRC32C=y
< CONFIG_NLATTR=y

"scsi"
< CONFIG_SCSI=y
< CONFIG_SCSI_DMA=y
< CONFIG_SCSI_PROC_FS=y
< CONFIG_SCSI_CONSTANTS=y
< CONFIG_SCSI_LOGGING=y
< CONFIG_SCSI_SCAN_ASYNC=y
< CONFIG_SCSI_ISCSI_ATTRS=y
< CONFIG_SCSI_LOWLEVEL=y

"input"
< CONFIG_INPUT_FF_MEMLESS=y
< CONFIG_INPUT_KEYBOARD=y
< CONFIG_INPUT_MISC=y
< CONFIG_VT=y
< CONFIG_CONSOLE_TRANSLATIONS=y
< CONFIG_VT_CONSOLE=y
< CONFIG_VT_CONSOLE_SLEEP=y
< CONFIG_HW_CONSOLE=y
< CONFIG_VT_HW_CONSOLE_BINDING=y
< CONFIG_UNIX98_PTYS=y
< CONFIG_DEVMEM=y
< CONFIG_SERIAL_8250_DMA=y
< CONFIG_HVC_DRIVER=y
< CONFIG_VIRTIO_CONSOLE=y
< CONFIG_VGA_CONSOLE=y
< CONFIG_DUMMY_CONSOLE=y
< CONFIG_DUMMY_CONSOLE_COLUMNS=80
< CONFIG_DUMMY_CONSOLE_ROWS=25
< CONFIG_HID=y
< CONFIG_HIDRAW=y
< CONFIG_HID_A4TECH=y
< CONFIG_HID_APPLE=y
< CONFIG_HID_BELKIN=y
< CONFIG_HID_CHERRY=y
< CONFIG_HID_CHICONY=y
< CONFIG_HID_CYPRESS=y
< CONFIG_HID_EZKEY=y
< CONFIG_HID_KENSINGTON=y
< CONFIG_HID_LOGITECH=y
< CONFIG_HID_MICROSOFT=y
< CONFIG_HID_MONTEREY=y

"fs stuff"
< CONFIG_EXT4_FS=y
< CONFIG_EXT4_USE_FOR_EXT23=y
< CONFIG_EXT4_FS_POSIX_ACL=y
< CONFIG_EXT4_FS_SECURITY=y
< CONFIG_EXT4_DEBUG=y
< CONFIG_JBD2=y
< CONFIG_JBD2_DEBUG=y
< CONFIG_FS_MBCACHE=y
< CONFIG_FS_POSIX_ACL=y
< CONFIG_EXPORTFS=y
< CONFIG_OVERLAY_FS=y
< CONFIG_TMPFS=y
< CONFIG_TMPFS_XATTR=y
< CONFIG_KERNFS=y
< CONFIG_HUGETLBFS=y
< CONFIG_HUGETLB_PAGE=y
< CONFIG_MISC_FILESYSTEMS=y
< CONFIG_SQUASHFS=y
< CONFIG_SQUASHFS_FILE_CACHE=y
< CONFIG_SQUASHFS_DECOMP_SINGLE=y
< CONFIG_SQUASHFS_XATTR=y
< CONFIG_SQUASHFS_ZLIB=y
< CONFIG_SQUASHFS_LZ4=y
< CONFIG_SQUASHFS_LZO=y
< CONFIG_SQUASHFS_XZ=y
< CONFIG_SQUASHFS_FRAGMENT_CACHE_SIZE=3
< CONFIG_PSTORE=y
< CONFIG_NETWORK_FILESYSTEMS=y

"permissions"
< CONFIG_FANOTIFY_ACCESS_PERMISSIONS=y
< CONFIG_QUOTA=y
< CONFIG_QUOTACTL=y
< CONFIG_QUOTACTL_COMPAT=y
< CONFIG_TMPFS_POSIX_ACL=y

"crypto and keys"
< CONFIG_KEYS=y
< CONFIG_PERSISTENT_KEYRINGS=y
< CONFIG_ENCRYPTED_KEYS=y
< CONFIG_SECURITY=y
< CONFIG_SECURITYFS=y
< CONFIG_SECURITY_NETWORK=y
< CONFIG_SECURITY_NETWORK_XFRM=y
< CONFIG_LSM_MMAP_MIN_ADDR=65536
< CONFIG_SECURITY_SELINUX=y
< CONFIG_SECURITY_SELINUX_BOOTPARAM=y
< CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1
< CONFIG_SECURITY_SELINUX_DISABLE=y
< CONFIG_SECURITY_SELINUX_DEVELOP=y
< CONFIG_SECURITY_SELINUX_AVC_STATS=y
< CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
< CONFIG_INTEGRITY=y
< CONFIG_INTEGRITY_AUDIT=y
< CONFIG_DEFAULT_SECURITY_SELINUX=y
< CONFIG_DEFAULT_SECURITY="selinux"
< CONFIG_CRYPTO=y
< CONFIG_CRYPTO_ALGAPI=y
< CONFIG_CRYPTO_ALGAPI2=y
< CONFIG_CRYPTO_AEAD=y
< CONFIG_CRYPTO_AEAD2=y
< CONFIG_CRYPTO_BLKCIPHER=y
< CONFIG_CRYPTO_BLKCIPHER2=y
< CONFIG_CRYPTO_HASH=y
< CONFIG_CRYPTO_HASH2=y
< CONFIG_CRYPTO_RNG=y
< CONFIG_CRYPTO_RNG2=y
< CONFIG_CRYPTO_PCOMP2=y
< CONFIG_CRYPTO_MANAGER=y
< CONFIG_CRYPTO_MANAGER2=y
< CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y
< CONFIG_CRYPTO_GF128MUL=y
< CONFIG_CRYPTO_NULL=y
< CONFIG_CRYPTO_WORKQUEUE=y
< CONFIG_CRYPTO_SEQIV=y
< CONFIG_CRYPTO_CBC=y
< CONFIG_CRYPTO_CTR=y
< CONFIG_CRYPTO_CTS=y
< CONFIG_CRYPTO_ECB=y
< CONFIG_CRYPTO_XTS=y
< CONFIG_CRYPTO_HMAC=y
< CONFIG_CRYPTO_CRC32C=y
< CONFIG_CRYPTO_CRCT10DIF=y
< CONFIG_CRYPTO_CRCT10DIF_PCLMUL=y
< CONFIG_CRYPTO_MD5=y
< CONFIG_CRYPTO_SHA1=y
< CONFIG_CRYPTO_SHA256=y
< CONFIG_CRYPTO_SHA512=y
< CONFIG_CRYPTO_AES=y
< CONFIG_CRYPTO_DEFLATE=y
< CONFIG_CRYPTO_LZO=y
< CONFIG_CRYPTO_DRBG_MENU=y
< CONFIG_CRYPTO_DRBG_HMAC=y
< CONFIG_CRYPTO_DRBG_HASH=y
< CONFIG_CRYPTO_DRBG_CTR=y
< CONFIG_CRYPTO_DRBG=y
< CONFIG_CRYPTO_HASH_INFO=y
< CONFIG_ASYMMETRIC_KEY_TYPE=y
< CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y
< CONFIG_PUBLIC_KEY_ALGO_RSA=y
< CONFIG_X509_CERTIFICATE_PARSER=y
< CONFIG_PKCS7_MESSAGE_PARSER=y
< CONFIG_SIGNED_PE_FILE_VERIFICATION=y

"compression"
< CONFIG_ZLIB_INFLATE=y
< CONFIG_ZLIB_DEFLATE=y
< CONFIG_LZO_COMPRESS=y
< CONFIG_LZO_DECOMPRESS=y
< CONFIG_LZ4_DECOMPRESS=y
< CONFIG_XZ_DEC=y
< CONFIG_XZ_DEC_X86=y
< CONFIG_XZ_DEC_POWERPC=y
< CONFIG_XZ_DEC_IA64=y
< CONFIG_XZ_DEC_ARM=y
< CONFIG_XZ_DEC_ARMTHUMB=y
< CONFIG_XZ_DEC_SPARC=y
< CONFIG_XZ_DEC_BCJ=y
< CONFIG_DECOMPRESS_GZIP=y
< CONFIG_DECOMPRESS_BZIP2=y
< CONFIG_DECOMPRESS_LZMA=y
< CONFIG_DECOMPRESS_XZ=y
< CONFIG_DECOMPRESS_LZO=y
< CONFIG_DECOMPRESS_LZ4=y
< CONFIG_ASSOCIATIVE_ARRAY=y

"other lib stuff"
< CONFIG_DQL=y
< CONFIG_AVERAGE=y
< CONFIG_CLZ_TAB=y
< CONFIG_MPILIB=y
< CONFIG_OID_REGISTRY=y