$ grep ^CONFIG_PAX .config | tail -7 CONFIG_PAX_NOELFRELOCS=y CONFIG_PAX_KERNEXEC=y CONFIG_PAX_ASLR=y CONFIG_PAX_RANDUSTACK=y CONFIG_PAX_RANDMMAP=y CONFIG_PAX_MEMORY_SANITIZE=y CONFIG_PAX_REFCOUNT=y