Skip to content

K
kernel-hardening-checker
Commit 150c5ae7 by Alexander Popov
Options

Add TODO about SLUB_DEBUG_ON

parent 103bbe92
Showing with 1 additions and 1 deletions
kconfig_hardened_check/__init__.py
...@@ -379,7 +379,7 @@ def construct_checklist(l, arch): ...@@ -379,7 +379,7 @@ def construct_checklist(l, arch):
iommu_support_is_set)] iommu_support_is_set)]
# 'self_protection', 'my' # 'self_protection', 'my'
l += [OptCheck('self_protection', 'my', 'SLUB_DEBUG_ON', 'y')] l += [OptCheck('self_protection', 'my', 'SLUB_DEBUG_ON', 'y')] # TODO: is it better to set that via kernel cmd?
l += [OptCheck('self_protection', 'my', 'RESET_ATTACK_MITIGATION', 'y')] # needs userspace support (systemd) l += [OptCheck('self_protection', 'my', 'RESET_ATTACK_MITIGATION', 'y')] # needs userspace support (systemd)
if arch == 'X86_64': if arch == 'X86_64':
l += [AND(OptCheck('self_protection', 'my', 'AMD_IOMMU_V2', 'y'), l += [AND(OptCheck('self_protection', 'my', 'AMD_IOMMU_V2', 'y'),
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment