Skip to content

K
kernel-hardening-checker
Commit 12d6535d by Alexander Popov
Options

HARDEN_BRANCH_PREDICTOR for ARM64 is enabled by default since v5.10

parent 2bc87b84
Showing with 4 additions and 1 deletions
kconfig_hardened_check/__init__.py
...@@ -322,7 +322,10 @@ def construct_checklist(l, arch): ...@@ -322,7 +322,10 @@ def construct_checklist(l, arch):
if arch == 'ARM': if arch == 'ARM':
l += [OptCheck('self_protection', 'defconfig', 'CPU_SW_DOMAIN_PAN', 'y')] l += [OptCheck('self_protection', 'defconfig', 'CPU_SW_DOMAIN_PAN', 'y')]
l += [OptCheck('self_protection', 'defconfig', 'STACKPROTECTOR_PER_TASK', 'y')] l += [OptCheck('self_protection', 'defconfig', 'STACKPROTECTOR_PER_TASK', 'y')]
if arch in ('ARM64', 'ARM'): if arch == 'ARM64':
l += [OR(OptCheck('self_protection', 'defconfig', 'HARDEN_BRANCH_PREDICTOR', 'y'),
VerCheck((5, 10)))] # HARDEN_BRANCH_PREDICTOR is enabled by default since v5.10
if arch == 'ARM':
l += [OptCheck('self_protection', 'defconfig', 'HARDEN_BRANCH_PREDICTOR', 'y')] l += [OptCheck('self_protection', 'defconfig', 'HARDEN_BRANCH_PREDICTOR', 'y')]
# 'self_protection', 'kspp' # 'self_protection', 'kspp'
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment