Linux-hardened update schedule ?

[extraextra]

Best to use search first to avoid redundant questions.

kernel recompilation for better hardening

https://docs.clip-os.org/clipos/kernel.html These both look interesting. They’re mainly for kernel compile options though. Is there any way to build Whonix with custom kernel configurations? Or will kernels have to be recompiled to get custom configurations?