# Forward-edge Control Flow Integrity: indirect calls are checked against the
# callee's type at run time. Merged for USE="hardened lto", where clang
# builds the kernel and the GCC-only hardening plugins are skipped. A
# violation panics the kernel; cfi=warn on the command line only logs it.
CONFIG_CFI=y