Skip to content

K
kernel-hardening-checker
Commit b6cb71ab by Alexander Popov
Options

Add the nobti check

parent 35fa2ccf
Showing with 1 additions and 2 deletions
kconfig_hardened_check/__init__.py
...@@ -21,8 +21,6 @@ ...@@ -21,8 +21,6 @@
# ARM64: # ARM64:
# kpti=on # kpti=on
# #
# Should NOT be set:
# arm64.nobti
# arm64.nopauth # arm64.nopauth
# arm64.nomte # arm64.nomte
# #
...@@ -728,6 +726,7 @@ def add_cmdline_checks(l, arch): ...@@ -728,6 +726,7 @@ def add_cmdline_checks(l, arch):
l += [CmdlineCheck('self_protection', 'defconfig', 'nospectre_v1', 'is not set')] l += [CmdlineCheck('self_protection', 'defconfig', 'nospectre_v1', 'is not set')]
l += [CmdlineCheck('self_protection', 'defconfig', 'nospectre_v2', 'is not set')] l += [CmdlineCheck('self_protection', 'defconfig', 'nospectre_v2', 'is not set')]
l += [CmdlineCheck('self_protection', 'defconfig', 'nospec_store_bypass_disable', 'is not set')] l += [CmdlineCheck('self_protection', 'defconfig', 'nospec_store_bypass_disable', 'is not set')]
l += [CmdlineCheck('self_protection', 'defconfig', 'arm64.nobti', 'is not set')]
l += [OR(CmdlineCheck('self_protection', 'defconfig', 'mitigations', 'is not off'), l += [OR(CmdlineCheck('self_protection', 'defconfig', 'mitigations', 'is not off'),
CmdlineCheck('self_protection', 'defconfig', 'mitigations', 'is not set'))] CmdlineCheck('self_protection', 'defconfig', 'mitigations', 'is not set'))]
l += [OR(CmdlineCheck('self_protection', 'defconfig', 'spectre_v2', 'is not off'), l += [OR(CmdlineCheck('self_protection', 'defconfig', 'spectre_v2', 'is not off'),
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment