Skip to content

K
kernel-hardening-checker
Commit 2588752f by Alexander Popov
Options

Add the X86_KERNEL_IBT check 

Now it's enabled by default for X86_64.
parent eea34881
Showing with 1 additions and 0 deletions
kconfig_hardened_check/checks.py
...@@ -116,6 +116,7 @@ def add_kconfig_checks(l, arch): ...@@ -116,6 +116,7 @@ def add_kconfig_checks(l, arch):
if arch == 'X86_64': if arch == 'X86_64':
l += [KconfigCheck('self_protection', 'defconfig', 'PAGE_TABLE_ISOLATION', 'y')] l += [KconfigCheck('self_protection', 'defconfig', 'PAGE_TABLE_ISOLATION', 'y')]
l += [KconfigCheck('self_protection', 'defconfig', 'RANDOMIZE_MEMORY', 'y')] l += [KconfigCheck('self_protection', 'defconfig', 'RANDOMIZE_MEMORY', 'y')]
l += [KconfigCheck('self_protection', 'defconfig', 'X86_KERNEL_IBT', 'y')]
l += [AND(KconfigCheck('self_protection', 'defconfig', 'INTEL_IOMMU', 'y'), l += [AND(KconfigCheck('self_protection', 'defconfig', 'INTEL_IOMMU', 'y'),
iommu_support_is_set)] iommu_support_is_set)]
l += [AND(KconfigCheck('self_protection', 'defconfig', 'AMD_IOMMU', 'y'), l += [AND(KconfigCheck('self_protection', 'defconfig', 'AMD_IOMMU', 'y'),
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment