Skip to content

K
kernel-hardening-checker
Commit f6fa3b38 by Alexander Popov
Options

Add DEBUG_RODATA as old alternative to STRICT_KERNEL_RWX

parent c3569adf
Showing with 2 additions and 1 deletions
kconfig-hardened-check.py
......@@ -103,7 +103,8 @@ def construct_checklist():
checklist.append(OptCheck('PAGE_TABLE_ISOLATION', 'y', 'ubuntu18', 'self_protection'))
checklist.append(OptCheck('RETPOLINE', 'y', 'ubuntu18', 'self_protection'))
checklist.append(OptCheck('X86_64', 'y', 'ubuntu18', 'self_protection'))
checklist.append(OptCheck('STRICT_KERNEL_RWX', 'y', 'ubuntu18', 'self_protection'))
checklist.append(OR(OptCheck('STRICT_KERNEL_RWX', 'y', 'ubuntu18', 'self_protection'), \
OptCheck('DEBUG_RODATA', 'y', 'before_v4.11', 'self_protection')))
checklist.append(OptCheck('DEBUG_WX', 'y', 'ubuntu18', 'self_protection'))
checklist.append(OptCheck('RANDOMIZE_BASE', 'y', 'ubuntu18', 'self_protection'))
checklist.append(OptCheck('RANDOMIZE_MEMORY', 'y', 'ubuntu18', 'self_protection'))
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment