Maybe it would be useful to use this specific config: https://github.com/torvalds/linux/blob/master/kernel/configs/hardening.config