Skip to content

K
kernel-hardening-checker
Commit e84011fd by Alexander Popov
Options

Drop the 'kvm.nx_huge_pages' check 

It's not really about security
parent d006bfa4
Showing with 0 additions and 3 deletions
kconfig_hardened_check/checks.py
...@@ -468,9 +468,6 @@ def add_cmdline_checks(l, arch): ...@@ -468,9 +468,6 @@ def add_cmdline_checks(l, arch):
l += [OR(CmdlineCheck('self_protection', 'defconfig', 'kpti', 'is not off'), l += [OR(CmdlineCheck('self_protection', 'defconfig', 'kpti', 'is not off'),
AND(CmdlineCheck('self_protection', 'kspp', 'mitigations', 'auto,nosmt'), AND(CmdlineCheck('self_protection', 'kspp', 'mitigations', 'auto,nosmt'),
CmdlineCheck('self_protection', 'defconfig', 'kpti', 'is not set')))] CmdlineCheck('self_protection', 'defconfig', 'kpti', 'is not set')))]
l += [OR(CmdlineCheck('self_protection', 'defconfig', 'kvm.nx_huge_pages', 'is not off'),
AND(CmdlineCheck('self_protection', 'kspp', 'mitigations', 'auto,nosmt'),
CmdlineCheck('self_protection', 'defconfig', 'kvm.nx_huge_pages', 'is not set')))]
if arch == 'ARM64': if arch == 'ARM64':
l += [OR(CmdlineCheck('self_protection', 'defconfig', 'ssbd', 'kernel'), l += [OR(CmdlineCheck('self_protection', 'defconfig', 'ssbd', 'kernel'),
CmdlineCheck('self_protection', 'my', 'ssbd', 'force-on'), CmdlineCheck('self_protection', 'my', 'ssbd', 'force-on'),
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment