Add Grsecurity recommendation on BINFMT_AOUT

Linux historical interest is not secure ;) Conflicts resolved by @a13xp0p0v

Add Grsecurity recommendation on BINFMT_AOUT
Linux historical interest is not secure ;) Conflicts resolved by @a13xp0p0v
55bd5ec6 · Loïc · Alexander Popov · 5336858f · 55bd5ec6
Commit 55bd5ec6 authored Jul 18, 2018 by Loïc Committed by Alexander Popov Jul 20, 2018
Hide whitespace changes
Inline Side-by-side

Showing with 1 additions and 0 deletions

kconfig-hardened-check.py kconfig-hardened-check.py +1 -0

No files found.
--- a/kconfig-hardened-check.py
+++ b/kconfig-hardened-check.py
@@ -112,6 +112,7 @@ def construct_opt_checks():
    checklist.append(OptCheck('ZSMALLOC_STAT',        'is not set', 'ubuntu18', 'cut_attack_surface'))
    checklist.append(OptCheck('PAGE_OWNER',           'is not set', 'ubuntu18', 'cut_attack_surface'))
    checklist.append(OptCheck('DEBUG_KMEMLEAK',       'is not set', 'ubuntu18', 'cut_attack_surface'))
+    checklist.append(OptCheck('BINFMT_AOUT',          'is not set', 'ubuntu18', 'cut_attack_surface'))

    checklist.append(OptCheck('IO_STRICT_DEVMEM',     'y', 'kspp', 'cut_attack_surface'))
    checklist.append(OptCheck('LEGACY_VSYSCALL_NONE', 'y', 'kspp', 'cut_attack_surface')) # 'vsyscall=none'