Skip to content

K
kernel-hardening-checker
Commit 23538f7a by Alexander Popov
Options

Add the check for the 'kvm.nx_huge_pages' cmdline parameter

parent c3775a15
Showing with 2 additions and 0 deletions
kconfig_hardened_check/__init__.py
...@@ -739,6 +739,8 @@ def add_cmdline_checks(l, arch): ...@@ -739,6 +739,8 @@ def add_cmdline_checks(l, arch):
CmdlineCheck('self_protection', 'defconfig', 'retbleed', 'is not set'))] CmdlineCheck('self_protection', 'defconfig', 'retbleed', 'is not set'))]
l += [OR(CmdlineCheck('self_protection', 'defconfig', 'kpti', 'is not off'), l += [OR(CmdlineCheck('self_protection', 'defconfig', 'kpti', 'is not off'),
CmdlineCheck('self_protection', 'defconfig', 'kpti', 'is not set'))] CmdlineCheck('self_protection', 'defconfig', 'kpti', 'is not set'))]
l += [OR(CmdlineCheck('self_protection', 'defconfig', 'kvm.nx_huge_pages', 'is not off'),
CmdlineCheck('self_protection', 'defconfig', 'kvm.nx_huge_pages', 'is not set'))]
if arch == 'ARM64': if arch == 'ARM64':
l += [OR(CmdlineCheck('self_protection', 'defconfig', 'ssbd', 'kernel'), l += [OR(CmdlineCheck('self_protection', 'defconfig', 'ssbd', 'kernel'),
CmdlineCheck('self_protection', 'my', 'ssbd', 'force-on'), CmdlineCheck('self_protection', 'my', 'ssbd', 'force-on'),
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment