Skip to content

K
kernel-hardening-checker
Commit 6d850bea by Alexander Popov
Options

Check x86 hardening features: X86_SMAP and X86_INTEL_UMIP

parent cf84449d
Showing with 2 additions and 0 deletions
kconfig-hardened-check.py
...@@ -108,6 +108,8 @@ def construct_checklist(): ...@@ -108,6 +108,8 @@ def construct_checklist():
checklist.append(OptCheck('PAGE_TABLE_ISOLATION', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('PAGE_TABLE_ISOLATION', 'y', 'ubuntu18', 'self_protection'))
checklist.append(OptCheck('RETPOLINE', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('RETPOLINE', 'y', 'ubuntu18', 'self_protection'))
checklist.append(OptCheck('X86_64', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('X86_64', 'y', 'ubuntu18', 'self_protection'))
checklist.append(OptCheck('X86_SMAP', 'y', 'ubuntu18', 'self_protection'))
checklist.append(OptCheck('X86_INTEL_UMIP', 'y', 'ubuntu18', 'self_protection'))
checklist.append(OR(OptCheck('STRICT_KERNEL_RWX', 'y', 'ubuntu18', 'self_protection'), \ checklist.append(OR(OptCheck('STRICT_KERNEL_RWX', 'y', 'ubuntu18', 'self_protection'), \
OptCheck('DEBUG_RODATA', 'y', 'before_v4.11', 'self_protection'))) OptCheck('DEBUG_RODATA', 'y', 'before_v4.11', 'self_protection')))
checklist.append(OptCheck('DEBUG_WX', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('DEBUG_WX', 'y', 'ubuntu18', 'self_protection'))
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment