For kernel panics and warnings currently there are few recommendations.
In terms of configs there are CONFIG_PANIC_TIMEOUT=-1 and CONFIG_PANIC_ON_OOPS=y
In terms of sysctls there are kernel.warn_limit = 1 and kernel.oops_limit = 1`.
To complete this we can add the following boot parameters:
panic=-1
oops=panic
panic_on_warn=1
Also we can include the sysctl:
These should be added to cover all forms of protection.