Skip to content

K
kernel-hardening-checker
Commit 4425d8b2 by Pelle van Gils
Options

Do not check CONFIG_HARDEN_EL2_VECTORS for v5.9+

parent 150c5ae7
Showing with 2 additions and 1 deletions
kconfig_hardened_check/__init__.py
...@@ -293,7 +293,8 @@ def construct_checklist(l, arch): ...@@ -293,7 +293,8 @@ def construct_checklist(l, arch):
if arch == 'ARM64': if arch == 'ARM64':
l += [OptCheck('self_protection', 'defconfig', 'ARM64_PAN', 'y')] l += [OptCheck('self_protection', 'defconfig', 'ARM64_PAN', 'y')]
l += [OptCheck('self_protection', 'defconfig', 'UNMAP_KERNEL_AT_EL0', 'y')] l += [OptCheck('self_protection', 'defconfig', 'UNMAP_KERNEL_AT_EL0', 'y')]
l += [OptCheck('self_protection', 'defconfig', 'HARDEN_EL2_VECTORS', 'y')] l += [OR(OptCheck('self_protection', 'defconfig', 'HARDEN_EL2_VECTORS', 'y'),
VerCheck((5,9)))] # HARDEN_EL2_VECTORS was removed in v5.9
l += [OptCheck('self_protection', 'defconfig', 'RODATA_FULL_DEFAULT_ENABLED', 'y')] l += [OptCheck('self_protection', 'defconfig', 'RODATA_FULL_DEFAULT_ENABLED', 'y')]
l += [OptCheck('self_protection', 'defconfig', 'ARM64_PTR_AUTH', 'y')] l += [OptCheck('self_protection', 'defconfig', 'ARM64_PTR_AUTH', 'y')]
if arch in ('X86_64', 'ARM64'): if arch in ('X86_64', 'ARM64'):
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment