Skip to content

K
kernel-hardening-checker
Commit 33120e46 by Alexander Popov
Options

Check the 'rodata' cmdline parameter on the arches except ARM64

parent 8c0b6920
Showing with 3 additions and 0 deletions
kconfig_hardened_check/__init__.py
......@@ -654,6 +654,9 @@ def add_cmdline_checks(l, arch):
l += [OR(CmdlineCheck('self_protection', 'defconfig', 'rodata', 'full'),
AND(KconfigCheck('self_protection', 'defconfig', 'RODATA_FULL_DEFAULT_ENABLED', 'y'),
CmdlineCheck('self_protection', 'defconfig', 'rodata', 'is not set')))]
else:
l += [OR(CmdlineCheck('self_protection', 'defconfig', 'rodata', '1'),
CmdlineCheck('self_protection', 'defconfig', 'rodata', 'is not set'))]
l += [OR(CmdlineCheck('self_protection', 'kspp', 'init_on_alloc', '1'),
AND(KconfigCheck('self_protection', 'kspp', 'INIT_ON_ALLOC_DEFAULT_ON', 'y'),
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment