Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
K
kernel-hardening-checker
Overview
Overview
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
fact-depend
kernel-hardening-checker
Commits
33edfd99
Commit
33edfd99
authored
Jan 14, 2020
by
Alexander Popov
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Answer the question about CONFIG_PANIC_ON_OOPS
Thanks to @madaidan Refers to #29
parent
981bd163
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
7 additions
and
0 deletions
+7
-0
README.md
README.md
+7
-0
No files found.
README.md
View file @
33edfd99
...
...
@@ -215,6 +215,13 @@ __Q:__ Why `CONFIG_GCC_PLUGINS` is automatically disabled during the kernel comp
__A:__
It means that your gcc doesn't support plugins. For example, if you have
`gcc-7`
on Ubuntu,
try to install
`gcc-7-plugin-dev`
package, it should help.
<br
/>
__Q:__
KSPP and CLIP OS recommend
`CONFIG_PANIC_ON_OOPS=y`
. Why doesn't this tool do the same?
__A:__
I personally don't support this recommendation because it provides easy denial-of-service
attacks for the whole system (kernel oops is not a rare situation). I think having
`CONFIG_BUG`
is enough here --
if we have a kernel oops in the process context, the offending/attacking process is killed.
[
1
]:
http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
[
2
]:
https://docs.clip-os.org/clipos/kernel.html#configuration
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment