Skip to content

K
kernel-hardening-checker
Commit 92abe5f1 by Alexander Popov
Options

Enable sysctl checking 

Refers to #65
parent f00f213d
Showing with 2 additions and 3 deletions
kconfig_hardened_check/__init__.py
...@@ -239,14 +239,13 @@ def main(): ...@@ -239,14 +239,13 @@ def main():
help='check the security hardening options in the kernel Kconfig file (also supports *.gz files)') help='check the security hardening options in the kernel Kconfig file (also supports *.gz files)')
parser.add_argument('-l', '--cmdline', parser.add_argument('-l', '--cmdline',
help='check the security hardening options in the kernel cmdline file (contents of /proc/cmdline)') help='check the security hardening options in the kernel cmdline file (contents of /proc/cmdline)')
# parser.add_argument('-s', '--sysctl', parser.add_argument('-s', '--sysctl',
# help='check the security hardening options in the sysctl output file (`sudo sysctl -a > file`)') help='check the security hardening options in the sysctl output file (`sudo sysctl -a > file`)')
parser.add_argument('-p', '--print', choices=supported_archs, parser.add_argument('-p', '--print', choices=supported_archs,
help='print the security hardening recommendations for the selected microarchitecture') help='print the security hardening recommendations for the selected microarchitecture')
parser.add_argument('-g', '--generate', choices=supported_archs, parser.add_argument('-g', '--generate', choices=supported_archs,
help='generate a Kconfig fragment with the security hardening options for the selected microarchitecture') help='generate a Kconfig fragment with the security hardening options for the selected microarchitecture')
args = parser.parse_args() args = parser.parse_args()
args.sysctl = None # FIXME
mode = None mode = None
if args.mode: if args.mode:
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment