Skip to content

K
kernel-hardening-checker
Commit 96770e5b by Alexander Popov
Options

Keep the old X86_PTDUMP check as a backup

parent 406370ec
Showing with 2 additions and 1 deletions
kconfig_hardened_check/__init__.py
...@@ -532,7 +532,8 @@ def construct_checklist(l, arch): ...@@ -532,7 +532,8 @@ def construct_checklist(l, arch):
l += [OptCheck('cut_attack_surface', 'grsecurity', 'KCOV', 'is not set')] l += [OptCheck('cut_attack_surface', 'grsecurity', 'KCOV', 'is not set')]
l += [OptCheck('cut_attack_surface', 'grsecurity', 'PROVIDE_OHCI1394_DMA_INIT', 'is not set')] l += [OptCheck('cut_attack_surface', 'grsecurity', 'PROVIDE_OHCI1394_DMA_INIT', 'is not set')]
l += [OptCheck('cut_attack_surface', 'grsecurity', 'SUNRPC_DEBUG', 'is not set')] l += [OptCheck('cut_attack_surface', 'grsecurity', 'SUNRPC_DEBUG', 'is not set')]
l += [OptCheck('cut_attack_surface', 'grsecurity', 'PTDUMP_DEBUGFS', 'is not set')] l += [AND(OptCheck('cut_attack_surface', 'grsecurity', 'PTDUMP_DEBUGFS', 'is not set'),
OptCheck('cut_attack_surface', 'grsecurity', 'X86_PTDUMP', 'is not set'))]
# 'cut_attack_surface', 'maintainer' # 'cut_attack_surface', 'maintainer'
l += [OptCheck('cut_attack_surface', 'maintainer', 'DRM_LEGACY', 'is not set')] # recommended by Daniel Vetter in /issues/38 l += [OptCheck('cut_attack_surface', 'maintainer', 'DRM_LEGACY', 'is not set')] # recommended by Daniel Vetter in /issues/38
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment