anchor.diff:    SQUASHFS_LZ4 y
   
     # Security related features.
  +  RANDOMIZE_BASE y
     STRICT_DEVMEM y # Filter access to /dev/mem
     SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
     DEVKMEM n # Disable /dev/kmem
  
positive.code:   HZ_300 y
    KEXEC_FILE y
    KEXEC_JUMP y
  
    # Easier debugging of NFS issues.
    SUNRPC_DEBUG y
  
    # Virtualisation.
    PARAVIRT y
    HYPERVISOR_GUEST y
    KVM_APIC_ARCHITECTURE y
    KVM_ASYNC_PF y
  
negative.code:   # zram support (e.g for in-memory compressed swap).
    ZSMALLOC y
    ZRAM m
    ZSWAP y
  
    # Enable PCIe and USB for the brcmfmac driver
    BRCMFMAC_USB y
  