Skip to content

K
kernel-hardening-checker
Commit 8a32124f by Alexander Popov
Options

Fix the 'decision' for the 'vdso32' check

parent 46a7b1fe
Showing with 2 additions and 2 deletions
kernel_hardening_checker/checks.py
......@@ -545,13 +545,13 @@ def add_cmdline_checks(l, arch):
AND(KconfigCheck('cut_attack_surface', 'kspp', 'LEGACY_VSYSCALL_NONE', 'y'),
CmdlineCheck('cut_attack_surface', 'kspp', 'vsyscall', 'is not set')))]
l += [OR(CmdlineCheck('cut_attack_surface', 'my', 'vdso32', '1'),
CmdlineCheck('cut_attack_surface', 'my', 'vdso32', '0'),
CmdlineCheck('cut_attack_surface', 'kspp', 'vdso32', '0'),
AND(KconfigCheck('cut_attack_surface', 'kspp', 'COMPAT_VDSO', 'is not set'),
CmdlineCheck('cut_attack_surface', 'my', 'vdso32', 'is not set')))] # the vdso32 parameter must not be 2
if arch == 'X86_32':
l += [OR(CmdlineCheck('cut_attack_surface', 'my', 'vdso32', '1'),
CmdlineCheck('cut_attack_surface', 'my', 'vdso', '1'),
CmdlineCheck('cut_attack_surface', 'my', 'vdso32', '0'),
CmdlineCheck('cut_attack_surface', 'kspp', 'vdso32', '0'),
CmdlineCheck('cut_attack_surface', 'my', 'vdso', '0'),
AND(KconfigCheck('cut_attack_surface', 'kspp', 'COMPAT_VDSO', 'is not set'),
CmdlineCheck('cut_attack_surface', 'my', 'vdso32', 'is not set'),
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment