Skip to content

K
kernel-hardening-checker
Commit 2b5bf354 by Alexander Popov
Options

Add the command line parameters that should NOT be set

parent b7d33ca9
Showing with 5 additions and 0 deletions
kconfig_hardened_check/__init__.py
...@@ -34,6 +34,11 @@ ...@@ -34,6 +34,11 @@
# kpti=on # kpti=on
# ssbd=force-on # ssbd=force-on
# #
# Should NOT be set:
# nokaslr
# arm64.nobti
# arm64.nopauth
#
# N.B. Hardening sysctls: # N.B. Hardening sysctls:
# kernel.kptr_restrict=2 (or 1?) # kernel.kptr_restrict=2 (or 1?)
# kernel.dmesg_restrict=1 (also see the kconfig option) # kernel.dmesg_restrict=1 (also see the kconfig option)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment