Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
K
kernel-hardening-checker
Overview
Overview
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
fact-depend
kernel-hardening-checker
Commits
1991da2e
Commit
1991da2e
authored
5 years ago
by
Alexander Popov
Committed by
Alexander Popov
5 years ago
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Add the link to @BlackIkeEagle article
parent
e54cb30a
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
8 additions
and
0 deletions
+8
-0
README.md
README.md
+8
-0
No files found.
README.md
View file @
1991da2e
...
...
@@ -248,9 +248,17 @@ __A:__ I personally don't support this recommendation because it provides easy d
attacks for the whole system (kernel oops is not a rare situation). I think having
`CONFIG_BUG`
is enough here --
if we have a kernel oops in the process context, the offending/attacking process is killed.
<br
/>
__Q:__
What about performance impact of these kernel hardening options?
__A:__
Ike Devolder
[
@BlackIkeEagle
][
7
]
made some performance tests and described the results in
[
this article
][
8
]
.
[
1
]:
http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
[
2
]:
https://docs.clip-os.org/clipos/kernel.html#configuration
[
3
]:
https://grsecurity.net/
[
4
]:
https://github.com/a13xp0p0v/linux-kernel-defence-map
[
5
]:
https://lwn.net/Articles/791863/
[
6
]:
https://github.com/a13xp0p0v/kconfig-hardened-check/issues/38
[
7
]:
https://github.com/BlackIkeEagle
[
8
]:
https://blog.herecura.eu/blog/2020-05-30-kconfig-hardening-tests/
This diff is collapsed.
Click to expand it.
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment