Skip to content

K
kernel-hardening-checker
Unverified Commit 6f70c616 by madaidan Committed by GitHub
Options

GrapheneOS is the continuation of CopperheadOS

parent 1e2a1251
Showing with 1 additions and 1 deletions
kconfig-hardened-check.py
...@@ -426,7 +426,7 @@ def construct_checklist(checklist, arch): ...@@ -426,7 +426,7 @@ def construct_checklist(checklist, arch):
checklist.append(AND(OptCheck('LDISC_AUTOLOAD', 'is not set', 'clipos', 'cut_attack_surface'), \ checklist.append(AND(OptCheck('LDISC_AUTOLOAD', 'is not set', 'clipos', 'cut_attack_surface'), \
VerCheck((5, 1)))) # LDISC_AUTOLOAD can be disabled since v5.1 VerCheck((5, 1)))) # LDISC_AUTOLOAD can be disabled since v5.1
checklist.append(OptCheck('AIO', 'is not set', 'copperhead', 'cut_attack_surface')) checklist.append(OptCheck('AIO', 'is not set', 'grapheneos', 'cut_attack_surface'))
checklist.append(OptCheck('MMIOTRACE', 'is not set', 'my', 'cut_attack_surface')) # refers to LOCKDOWN (permissive) checklist.append(OptCheck('MMIOTRACE', 'is not set', 'my', 'cut_attack_surface')) # refers to LOCKDOWN (permissive)
checklist.append(OptCheck('LIVEPATCH', 'is not set', 'my', 'cut_attack_surface')) checklist.append(OptCheck('LIVEPATCH', 'is not set', 'my', 'cut_attack_surface'))
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment