SELinux, Smack, Tomoyo, and AppArmor implement Mandatory Access Control (MAC).

Thanks to @izh1979 for the idea

Thanks to @izh1979 for the idea

The CONFIG_CORESIGHT framework provides a kernel interface for the
CoreSight debug and trace drivers for ARM/ARM64. It's better to have it
disabled to cut attack surface.

CONFIG_INTEGRITY is useless without enabling IMA/EVM.
We can't require enabling IMA/EVM because there are other
file system integrity mechanisms like DM_VERITY, FS_VERITY, etc.
So there is no reason to check CONFIG_INTEGRITY.

Refers to #75

Also rename old Android configs

It's refactoring, no functional changes

I mean testing 'is present' and 'is not off' in OR/AND

Refers to #80

Refers to #80

Refers to #80

Added support for gzipped config (eg. /proc/config.gz)