Skip to content

K
kernel-hardening-checker
Commit c0b1e259 by Alexander Popov
Options

Add the CONFIG_LIST_HARDENED check

parent 250cb522
Showing with 3 additions and 0 deletions
kernel_hardening_checker/checks.py
...@@ -229,6 +229,9 @@ def add_kconfig_checks(l, arch): ...@@ -229,6 +229,9 @@ def add_kconfig_checks(l, arch):
# 'self_protection', 'clipos' # 'self_protection', 'clipos'
l += [KconfigCheck('self_protection', 'clipos', 'SLAB_MERGE_DEFAULT', 'is not set')] l += [KconfigCheck('self_protection', 'clipos', 'SLAB_MERGE_DEFAULT', 'is not set')]
# 'self_protection', 'my'
l += [KconfigCheck('self_protection', 'my', 'LIST_HARDENED', 'y')]
# 'security_policy' # 'security_policy'
if arch in ('X86_64', 'ARM64', 'X86_32'): if arch in ('X86_64', 'ARM64', 'X86_32'):
l += [KconfigCheck('security_policy', 'defconfig', 'SECURITY', 'y')] l += [KconfigCheck('security_policy', 'defconfig', 'SECURITY', 'y')]
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment