Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
K
kernel-hardening-checker
Overview
Overview
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
fact-depend
kernel-hardening-checker
Commits
b7f680ac
Commit
b7f680ac
authored
Mar 26, 2020
by
Alexander Popov
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Call it a tool
parent
1aa2467c
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
5 additions
and
5 deletions
+5
-5
README.md
README.md
+4
-4
__init__.py
kconfig_hardened_check/__init__.py
+1
-1
No files found.
README.md
View file @
b7f680ac
#
Kconfig hardened
check
#
kconfig-hardened-
check
## Motivation
...
...
@@ -26,7 +26,7 @@ or exploitation techniques.
-
ARM64
-
ARM
##
Script o
utput examples
##
O
utput examples
### Usage
```
...
...
@@ -45,7 +45,7 @@ optional arguments:
--json print results in JSON format
```
###
Script o
utput for `Ubuntu 18.04 (Bionic Beaver with HWE)` kernel config
###
O
utput for `Ubuntu 18.04 (Bionic Beaver with HWE)` kernel config
```
$ ./kconfig-hardened-check.py -c config_files/distros/ubuntu-bionic-generic.config
[+] Trying to detect architecture in "config_files/distros/ubuntu-bionic-generic.config"...
...
...
@@ -209,7 +209,7 @@ The current version of `kconfig-hardened-check` is __0.5.5__, it's marked with t
__Q:__
How disabling
`CONFIG_USER_NS`
cuts the attack surface? It's needed for containers!
__A:__
Yes, the
`CONFIG_USER_NS`
option provides some isolation between the userspace programs,
but the
script
recommends disabling it to cut the attack surface __of the kernel__.
but the
tool
recommends disabling it to cut the attack surface __of the kernel__.
The rationale:
...
...
kconfig_hardened_check/__init__.py
View file @
b7f680ac
#!/usr/bin/python3
#
# This
script
helps me to check the Linux kernel Kconfig option list
# This
tool
helps me to check the Linux kernel Kconfig option list
# against my hardening preferences for X86_64, ARM64, X86_32, and ARM.
# Let the computers do their job!
#
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment