Skip to content

K
kernel-hardening-checker
Commit a758ea69 by Alexander Popov
Options

Add CONFIG_SLS vs CVE-2021-26341 in Straight-Line-Speculation

parent 6268a310
Showing with 1 additions and 0 deletions
kconfig_hardened_check/__init__.py
...@@ -470,6 +470,7 @@ def add_kconfig_checks(l, arch): ...@@ -470,6 +470,7 @@ def add_kconfig_checks(l, arch):
# 'self_protection', 'my' # 'self_protection', 'my'
l += [KconfigCheck('self_protection', 'my', 'RESET_ATTACK_MITIGATION', 'y')] # needs userspace support (systemd) l += [KconfigCheck('self_protection', 'my', 'RESET_ATTACK_MITIGATION', 'y')] # needs userspace support (systemd)
if arch == 'X86_64': if arch == 'X86_64':
l += [KconfigCheck('self_protection', 'my', 'SLS', 'y')] # vs CVE-2021-26341 in Straight-Line-Speculation
l += [AND(KconfigCheck('self_protection', 'my', 'AMD_IOMMU_V2', 'y'), l += [AND(KconfigCheck('self_protection', 'my', 'AMD_IOMMU_V2', 'y'),
iommu_support_is_set)] iommu_support_is_set)]
if arch == 'ARM64': if arch == 'ARM64':
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment