Commit c1ebaa40 by Alexander Popov

Update the README

parent 8f7db404
...@@ -79,12 +79,13 @@ options: ...@@ -79,12 +79,13 @@ options:
(also supports *.gz files) (also supports *.gz files)
-l CMDLINE, --cmdline CMDLINE -l CMDLINE, --cmdline CMDLINE
check the security hardening options in the kernel cmdline file check the security hardening options in the kernel cmdline file
(contents of /proc/cmdline)
-p {X86_64,X86_32,ARM64,ARM}, --print {X86_64,X86_32,ARM64,ARM} -p {X86_64,X86_32,ARM64,ARM}, --print {X86_64,X86_32,ARM64,ARM}
print the security hardening recommendations for the selected print the security hardening recommendations for the selected
microarchitecture microarchitecture
-g {X86_64,X86_32,ARM64,ARM}, --generate {X86_64,X86_32,ARM64,ARM} -g {X86_64,X86_32,ARM64,ARM}, --generate {X86_64,X86_32,ARM64,ARM}
generate a Kconfig fragment with the security hardening options for generate a Kconfig fragment with the security hardening options
the selected microarchitecture for the selected microarchitecture
``` ```
## Output modes ## Output modes
...@@ -344,7 +345,7 @@ sysrq_always_enabled |cmdline| is not set | my |cut_att ...@@ -344,7 +345,7 @@ sysrq_always_enabled |cmdline| is not set | my |cut_att
## Generating a Kconfig fragment with the security hardening options ## Generating a Kconfig fragment with the security hardening options
With the `-g` argument the tool generates a Kconfig fragment with the security hardening options for the selected microarchitecture. With the `-g` argument, the tool generates a Kconfig fragment with the security hardening options for the selected microarchitecture.
This Kconfig fragment can be merged with the existing Linux kernel config: This Kconfig fragment can be merged with the existing Linux kernel config:
``` ```
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment