Skip to content

K
kernel-hardening-checker
Commit becad496 by Alexander Popov
Options

Add STACKPROTECTOR_PER_TASK check for ARM

parent f223aea3
Showing with 2 additions and 0 deletions
kconfig-hardened-check.py
...@@ -245,6 +245,8 @@ def construct_checklist(arch): ...@@ -245,6 +245,8 @@ def construct_checklist(arch):
page_poisoning_is_set)) page_poisoning_is_set))
if debug_mode or arch == 'X86_32': if debug_mode or arch == 'X86_32':
checklist.append(OptCheck('PAGE_TABLE_ISOLATION', 'y', 'my', 'self_protection')) checklist.append(OptCheck('PAGE_TABLE_ISOLATION', 'y', 'my', 'self_protection'))
if debug_mode or arch == 'ARM':
checklist.append(OptCheck('STACKPROTECTOR_PER_TASK', 'y', 'my', 'self_protection'))
if debug_mode or arch == 'X86_64' or arch == 'ARM64' or arch == 'X86_32': if debug_mode or arch == 'X86_64' or arch == 'ARM64' or arch == 'X86_32':
checklist.append(OptCheck('SECURITY', 'y', 'defconfig', 'security_policy')) checklist.append(OptCheck('SECURITY', 'y', 'defconfig', 'security_policy'))
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment