Add the command line parameters that should NOT be set

2b5bf354 · Alexander Popov · b7d33ca9 · 2b5bf354
Commit 2b5bf354 authored Aug 14, 2021 by Alexander Popov
Show whitespace changes
Inline Side-by-side

Showing with 5 additions and 0 deletions

__init__.py kconfig_hardened_check/__init__.py +5 -0

No files found.
--- a/kconfig_hardened_check/__init__.py
+++ b/kconfig_hardened_check/__init__.py
@@ -34,6 +34,11 @@
 #           kpti=on
 #           ssbd=force-on
 #
+#    Should NOT be set:
+#           nokaslr
+#           arm64.nobti
+#           arm64.nopauth
+#
 # N.B. Hardening sysctls:
 #    kernel.kptr_restrict=2 (or 1?)
 #    kernel.dmesg_restrict=1 (also see the kconfig option)