as per http://forums.whonix.org/t/kernel-recompilation-for-better-hardening/7598/314
https://github.com/Whonix/hardened-kernel/blob/master/usr/share/hardened-kernel/hardened-host-kernel
https://github.com/Whonix/hardened-kernel/blob/master/usr/share/hardened-kernel/hardened-vm-kernel
I can't work on this. Please go for T977.