CONFIG_VMSPLIT_3G=y is for maximal userspace memory area and maximal ASLR.

It works both for ARM and X86_32.

That commit contains changes in the checks that I made after learning
the upstreamed LOCKDOWN

That features didn't change in the upstreamed version of LOCKDOWN

That would simplify things

The debug_mode enables:
 - reporting about unknown kernel options in the config,
 - showing all checks from all supported platforms,
 - verbose printing of ComplexOptChecks (OR, AND).

This fixes the false positive report about LDISC_AUTOLOAD for old kernels

Nice, like it :)

And move config_checklist to other globals by the way.

This option is now enabled by default in case of compiler support.

Refers to PR #31.

Thanks to @HacKurx for his work.