> Is there a place where these options are listed? Preferably with the pros/cons of enabling each option. Good place to start: building your own kernel from so

> Is there a place where these options are listed? Preferably with the pros/cons of enabling each option. Good place to start: building your own kernel from source. I tried that once and was quite overwhelmed with the sheer number of knobs and features that are available. While I do still want a centralized list of things to do/check for hardening a kernel, I don't think it will _ever_ be exhaustive. And some pros/cons would involve very _deeply_ complex behavior which would be difficult to determine whether or not the tradeoff is even relevant.