anchor.diff:    MICROCODE_AMD y
   
     # Misc. options.
  +  EARLY_PRINTK_DBGP n
  +  EARLY_PRINTK_EFI y
     EXPERT y
     STRIP_ASM_SYMS y
     UNUSED_SYMBOLS y
  
positive.code:   # Security related features.
    RANDOMIZE_BASE y
    STRICT_DEVMEM y # Filter access to /dev/mem
    SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default
    DEVKMEM n # Disable /dev/kmem
    CC_STACKPROTECTOR_REGULAR y
  
negative.code:   INTEL_TXT y
    SECURITY_YAMA y
    DEFAULT_SECURITY_DAC y
    SECURITY_DMESG_RESTRICT y
  
    # Microcode loading support
    MICROCODE y
  