# minimal_config_snippet.txt
# Tamilselvan | Cyber Security Researcher | Ethical Hacker
# Copy useful lines into .config or use as reference for make menuconfig.
#
# After: make defconfig
# Then enable/disable the following. Names are CONFIG_* from kernel.

# --- Essential for most systems ---
CONFIG_64BIT=y
CONFIG_MODULES=y
CONFIG_MODULE_UNLOAD=y
CONFIG_BLK_DEV_SD=y
CONFIG_EXT4_FS=y
CONFIG_VFAT_FS=y
CONFIG_PROC_FS=y
CONFIG_SYSFS=y
CONFIG_TTY=y
CONFIG_NET=y
CONFIG_INET=y
CONFIG_IP_PNP=y
CONFIG_DEVTMPFS=y
CONFIG_DEVTMPFS_MOUNT=y

# --- For initramfs ---
CONFIG_BLK_DEV_INITRD=y
CONFIG_RD_GZIP=y

# --- For debugging (lab only) ---
# CONFIG_DEBUG_INFO=y
# CONFIG_DEBUG_KERNEL=y
# CONFIG_PROVE_LOCKING=y
# CONFIG_DYNAMIC_DEBUG=y

# --- Security (harden in production) ---
CONFIG_SECURITY=y
CONFIG_SECURITY_NETWORK=y
# CONFIG_SECURITY_SELINUX=y  # if using SELinux

# --- Disable unneeded to shrink (example) ---
# CONFIG_SOUND=n
# CONFIG_USB=n              # only if you don't need USB
