You could use a hardened kernel. I don't remember exactly how to set it up, but look it up like Nixos hardened kernel.
You could use a hardened kernel. I don't remember exactly how to set it up, but look it up like Nixos hardened kernel.