Use selection of hardening options recommended by Kernel Self Protection Project Build initramfs along with the kernel.