Skip to content

K
kernel-hardening-checker
Commit f8b12633 by Alexander Popov
Options

INTEL_IOMMU_SVM is available only for X86_64

parent 3b2a9440
Showing with 3 additions and 2 deletions
kconfig_hardened_check/__init__.py
......@@ -388,10 +388,11 @@ def construct_checklist(l, arch):
l += [AND(OptCheck('self_protection', 'clipos', 'STACKLEAK_RUNTIME_DISABLE', 'is not set'),
stackleak_is_set)]
if arch in ('X86_64', 'X86_32'):
l += [AND(OptCheck('self_protection', 'clipos', 'INTEL_IOMMU_SVM', 'y'),
iommu_support_is_set)]
l += [AND(OptCheck('self_protection', 'clipos', 'INTEL_IOMMU_DEFAULT_ON', 'y'),
iommu_support_is_set)]
if arch == 'X86_64':
l += [AND(OptCheck('self_protection', 'clipos', 'INTEL_IOMMU_SVM', 'y'),
iommu_support_is_set)]
if arch == 'X86_32':
l += [AND(OptCheck('self_protection', 'clipos', 'INTEL_IOMMU', 'y'),
iommu_support_is_set)]
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment