Skip to content

K
kernel-hardening-checker
Commit e5e4b2a5 by Alexander Popov
Options

Add ARM64_PAN

parent befa4a35
Showing with 1 additions and 0 deletions
kconfig_hardened_check/__init__.py
...@@ -303,6 +303,7 @@ def construct_checklist(l, arch): ...@@ -303,6 +303,7 @@ def construct_checklist(l, arch):
l += [AND(OptCheck('self_protection', 'defconfig', 'AMD_IOMMU', 'y'), l += [AND(OptCheck('self_protection', 'defconfig', 'AMD_IOMMU', 'y'),
iommu_support_is_set)] iommu_support_is_set)]
if arch == 'ARM64': if arch == 'ARM64':
l += [OptCheck('self_protection', 'defconfig', 'ARM64_PAN', 'y')]
l += [OptCheck('self_protection', 'defconfig', 'UNMAP_KERNEL_AT_EL0', 'y')] l += [OptCheck('self_protection', 'defconfig', 'UNMAP_KERNEL_AT_EL0', 'y')]
l += [OptCheck('self_protection', 'defconfig', 'HARDEN_EL2_VECTORS', 'y')] l += [OptCheck('self_protection', 'defconfig', 'HARDEN_EL2_VECTORS', 'y')]
l += [OptCheck('self_protection', 'defconfig', 'RODATA_FULL_DEFAULT_ENABLED', 'y')] l += [OptCheck('self_protection', 'defconfig', 'RODATA_FULL_DEFAULT_ENABLED', 'y')]
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment