Skip to content

K
kernel-hardening-checker
Commit 899752c1 by Alexander Popov
Options

Also check 'nospectre_v2' with 'spectre_v2'

parent f47bd6f7
Showing with 2 additions and 1 deletions
kconfig_hardened_check/__init__.py
...@@ -749,7 +749,8 @@ def add_cmdline_checks(l, arch): ...@@ -749,7 +749,8 @@ def add_cmdline_checks(l, arch):
# 'self_protection', 'clipos' # 'self_protection', 'clipos'
l += [CmdlineCheck('self_protection', 'clipos', 'page_alloc.shuffle', '1')] l += [CmdlineCheck('self_protection', 'clipos', 'page_alloc.shuffle', '1')]
if arch in ('X86_64', 'X86_32'): if arch in ('X86_64', 'X86_32'):
l += [CmdlineCheck('self_protection', 'clipos', 'spectre_v2', 'on')] l += [AND(CmdlineCheck('self_protection', 'clipos', 'spectre_v2', 'on'),
CmdlineCheck('self_protection', 'defconfig', 'nospectre_v2', 'is not set'))]
# 'cut_attack_surface', 'kspp' # 'cut_attack_surface', 'kspp'
if arch == 'X86_64': if arch == 'X86_64':
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment