Skip to content

K
kernel-hardening-checker
Commit 1ce2fdcf by Alexander Popov
Options

Add the recommendation about TRIM_UNUSED_KSYMS

parent f9438fcc
Showing with 1 additions and 0 deletions
kconfig_hardened_check/__init__.py
......@@ -509,6 +509,7 @@ def construct_checklist(l, arch):
l += [OptCheck('cut_attack_surface', 'lockdown', 'MMIOTRACE_TEST', 'is not set')] # refers to LOCKDOWN
# 'cut_attack_surface', 'my'
l += [OptCheck('cut_attack_surface', 'my', 'TRIM_UNUSED_KSYMS', 'y')]
l += [OptCheck('cut_attack_surface', 'my', 'MMIOTRACE', 'is not set')] # refers to LOCKDOWN (permissive)
l += [OptCheck('cut_attack_surface', 'my', 'LIVEPATCH', 'is not set')]
l += [OptCheck('cut_attack_surface', 'my', 'IP_DCCP', 'is not set')]
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment