Skip to content

K
kernel-hardening-checker
Commit 649272d2 by Alexander Popov
Options

Check the pti cmdline parameter

parent 4d49d01a
Showing with 2 additions and 1 deletions
kconfig_hardened_check/__init__.py
...@@ -26,7 +26,6 @@ ...@@ -26,7 +26,6 @@
# mitigations=auto,nosmt (nosmt is slow) # mitigations=auto,nosmt (nosmt is slow)
# X86: # X86:
# spectre_v2=on # spectre_v2=on
# pti=on
# spec_store_bypass_disable=on # spec_store_bypass_disable=on
# l1tf=full,force # l1tf=full,force
# l1d_flush=on (a part of the l1tf option) # l1d_flush=on (a part of the l1tf option)
...@@ -661,6 +660,8 @@ def add_cmdline_checks(l, arch): ...@@ -661,6 +660,8 @@ def add_cmdline_checks(l, arch):
# Calling the CmdlineCheck class constructor: # Calling the CmdlineCheck class constructor:
# CmdlineCheck(reason, decision, name, expected) # CmdlineCheck(reason, decision, name, expected)
if arch in ('X86_64', 'X86_32'):
l += [CmdlineCheck('self_protection', 'kspp', 'pti', 'on')]
# TODO: add other # TODO: add other
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment