Confidentiality

configname: CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY

Kernel default lockdown mode
└─>Confidentiality
In linux kernel since version 5.1 (release Date: 2019-05-05)  
The kernel runs in confidentiality mode by default. Features that
allow the kernel to be modified at runtime or that permit userland
code to read confidential material held inside the kernel are
disabled.