Skip to content

K
kernel-hardening-checker
Commit 67d4c7de by Alexander Popov
Options

Add the nomte check

parent 6f7e9c10
Showing with 1 additions and 2 deletions
kconfig_hardened_check/__init__.py
...@@ -21,8 +21,6 @@ ...@@ -21,8 +21,6 @@
# ARM64: # ARM64:
# kpti=on # kpti=on
# #
# arm64.nomte
#
# Hardware tag-based KASAN with arm64 Memory Tagging Extension (MTE): # Hardware tag-based KASAN with arm64 Memory Tagging Extension (MTE):
# kasan=on # kasan=on
# kasan.stacktrace=off # kasan.stacktrace=off
...@@ -727,6 +725,7 @@ def add_cmdline_checks(l, arch): ...@@ -727,6 +725,7 @@ def add_cmdline_checks(l, arch):
l += [CmdlineCheck('self_protection', 'defconfig', 'nospec_store_bypass_disable', 'is not set')] l += [CmdlineCheck('self_protection', 'defconfig', 'nospec_store_bypass_disable', 'is not set')]
l += [CmdlineCheck('self_protection', 'defconfig', 'arm64.nobti', 'is not set')] l += [CmdlineCheck('self_protection', 'defconfig', 'arm64.nobti', 'is not set')]
l += [CmdlineCheck('self_protection', 'defconfig', 'arm64.nopauth', 'is not set')] l += [CmdlineCheck('self_protection', 'defconfig', 'arm64.nopauth', 'is not set')]
l += [CmdlineCheck('self_protection', 'defconfig', 'arm64.nomte', 'is not set')]
l += [OR(CmdlineCheck('self_protection', 'defconfig', 'mitigations', 'is not off'), l += [OR(CmdlineCheck('self_protection', 'defconfig', 'mitigations', 'is not off'),
CmdlineCheck('self_protection', 'defconfig', 'mitigations', 'is not set'))] CmdlineCheck('self_protection', 'defconfig', 'mitigations', 'is not set'))]
l += [OR(CmdlineCheck('self_protection', 'defconfig', 'spectre_v2', 'is not off'), l += [OR(CmdlineCheck('self_protection', 'defconfig', 'spectre_v2', 'is not off'),
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment