anchor.diff:        DRM_LOAD_EDID_FIRMWARE = yes;
         VGA_SWITCHEROO         = yes; # Hybrid graphics support
         DRM_GMA500             = whenAtLeast "5.12" module;
  -      DRM_GMA600             = yes;
  +      DRM_GMA600             = whenOlder "5.13" yes;
         DRM_GMA3600            = whenOlder "5.12" yes;
         DRM_VMWGFX_FBCON       = yes;
         # necessary for amdgpu polaris support
  
positive.code:       THRUSTMASTER_FF    = yes;
        ZEROPLUS_FF        = yes;
  
        MODULE_COMPRESS    = yes;
        MODULE_COMPRESS_XZ = yes;
  
        SYSVIPC            = yes;  # System-V IPC
  
negative.code:       SECURITY_SELINUX_BOOTPARAM_VALUE = whenOlder "5.1" (freeform "0"); # Disable SELinux by default
        # Prevent processes from ptracing non-children processes
        SECURITY_YAMA                    = option yes;
        DEVKMEM                          = whenOlder "5.13" no; # Disable /dev/kmem
  
        USER_NS                          = yes; # Support for user namespaces
  
  