Deviations from Vanilla Configuration

Configuration Flag	Description
CONFIG_AUDIT=y	Prerequisite for AppArmor.
CONFIG_AUDITSYSCALL=y	^
CONFIG_AUDIT_TREE=y	^
CONFIG_AUDIT_WATCH=y	^
CONFIG_INTEL_PMC_CORE=m	https://software.intel.com/en-us/articles/intel-performance-counter-monitor
CONFIG_LOCALVERSION="-ph"	Append -ph to our kernel version string for easier distinction
CONFIG_MCORE2=y	Enable optimizations for 6th generation Intel processor
CONFIG_X86_INTEL_USERCOPY=y
CONFIG_X86_P6_NOP=y	Use more efficient multi-byte NOP instructions for P6 family processors
CONFIG_X86_USE_PPRO_CHECKSUM=y
CONFIG_NODES_SHIFT=2	Use a maximum of 2 NUMA nodes (deprecated because our system has a single socket CPU and can not benefit from NUMA)
CONFIG_SECURITY_APPARMOR=y	Enable AppArmor by default for Ubuntu support. https://wiki.ubuntu.com/AppArmor
CONFIG_DEFAULT_SECURITY="apparmor"
CONFIG_DEFAULT_SECURITY_APPARMOR=y
CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1
CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y
CONFIG_SECURITY_APPARMOR_HASH=y
CONFIG_TOUCHSCREEN_ATMEL_MXT=y	Enable support for our Atmel touchscreen
CONFIG_X86_INTEL_MPX=y	https://en.wikipedia.org/wiki/Intel_MPX

List of configuration differences are courtesy of christianbundy.