Skip to content

K
kernel-hardening-checker
Commit 1bfbcfbd by Alexander Popov
Options

Update the VMAP_STACK check: it is available for ARM

parent d611894f
Showing with 1 additions and 1 deletions
kconfig_hardened_check/__init__.py
...@@ -378,7 +378,7 @@ def add_kconfig_checks(l, arch): ...@@ -378,7 +378,7 @@ def add_kconfig_checks(l, arch):
VersionCheck((5, 5)))] # REFCOUNT_FULL is enabled by default since v5.5 VersionCheck((5, 5)))] # REFCOUNT_FULL is enabled by default since v5.5
if arch in ('X86_64', 'ARM64', 'X86_32'): if arch in ('X86_64', 'ARM64', 'X86_32'):
l += [KconfigCheck('self_protection', 'defconfig', 'RANDOMIZE_BASE', 'y')] l += [KconfigCheck('self_protection', 'defconfig', 'RANDOMIZE_BASE', 'y')]
if arch in ('X86_64', 'ARM64'): if arch in ('X86_64', 'ARM64', 'ARM'):
l += [KconfigCheck('self_protection', 'defconfig', 'VMAP_STACK', 'y')] l += [KconfigCheck('self_protection', 'defconfig', 'VMAP_STACK', 'y')]
if arch in ('X86_64', 'X86_32'): if arch in ('X86_64', 'X86_32'):
l += [KconfigCheck('self_protection', 'defconfig', 'DEBUG_WX', 'y')] l += [KconfigCheck('self_protection', 'defconfig', 'DEBUG_WX', 'y')]
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment