Skip to content

K
kernel-hardening-checker
Commit 46a7b1fe by Alexander Popov
Options

Improve the comment for the 'slab_common.usercopy_fallback' check

parent c1452a28
Showing with 3 additions and 2 deletions
kernel_hardening_checker/checks.py
...@@ -505,8 +505,9 @@ def add_cmdline_checks(l, arch): ...@@ -505,8 +505,9 @@ def add_cmdline_checks(l, arch):
CmdlineCheck('self_protection', 'kspp', 'hardened_usercopy', 'is not set')))] CmdlineCheck('self_protection', 'kspp', 'hardened_usercopy', 'is not set')))]
l += [AND(CmdlineCheck('self_protection', 'kspp', 'slab_common.usercopy_fallback', 'is not set'), l += [AND(CmdlineCheck('self_protection', 'kspp', 'slab_common.usercopy_fallback', 'is not set'),
KconfigCheck('self_protection', 'kspp', 'HARDENED_USERCOPY_FALLBACK', 'is not set'))] KconfigCheck('self_protection', 'kspp', 'HARDENED_USERCOPY_FALLBACK', 'is not set'))]
# don't require slab_common.usercopy_fallback=0, # Consequence of the HARDENED_USERCOPY_FALLBACK check by kspp.
# since HARDENED_USERCOPY_FALLBACK was removed in Linux v5.16 # Don't require slab_common.usercopy_fallback=0,
# since HARDENED_USERCOPY_FALLBACK was removed in Linux v5.16.
if arch in ('X86_64', 'ARM64', 'X86_32'): if arch in ('X86_64', 'ARM64', 'X86_32'):
l += [OR(CmdlineCheck('self_protection', 'kspp', 'iommu.strict', '1'), l += [OR(CmdlineCheck('self_protection', 'kspp', 'iommu.strict', '1'),
AND(KconfigCheck('self_protection', 'kspp', 'IOMMU_DEFAULT_DMA_STRICT', 'y'), AND(KconfigCheck('self_protection', 'kspp', 'IOMMU_DEFAULT_DMA_STRICT', 'y'),
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment