Commit 7af45860 by Alexander Popov

Introduce the versioning

At the Chaos Communication Camp 2019 @jelly told that it would be nice to add the kconfig-hardened-check to Arch Linux.

So I add versioning to make it happen.

Thanks @jelly, nice to meet you!
parent 0542f265
......@@ -176,8 +176,18 @@ CONFIG_ARCH_MMAP_RND_BITS | 32 | clipos |userspace_prot
[+] config check is finished: 'OK' - 50 / 'FAIL' - 70
```
## kconfig-hardened-check versioning
### Questions and answers
I usually update the kernel hardening recommendations after each Linux kernel release.
So the version of `kconfig-hardened-check` is associated with the corresponding version of the kernel.
The version format is: __[major_number].[kernel_version]__
The current version of `kconfig-hardened-check` is __0.5.2__, it's marked with the git tag.
## Questions and answers
__Q:__ How disabling `CONFIG_USER_NS` cuts the attack surface? It's needed for containers!
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment