Refers to the issue #19 by @HacKurx

They have a bigger authority :)

Refers to the issue #19 by @HacKurx

Refers to the issue #19 by @HacKurx

Refers to the issue #19 by @HacKurx

Refers to the issue #19 by @HacKurx

Refers to the issue #19 by @HacKurx

Refers to the issue #19 by @HacKurx

Update pentoo config link

Going to use them in future

Thanks to @HacKurx for updating the distro configs.

config check is finished: 'OK' - 41 / 'FAIL' - 62

config check is finished: 'OK' - 71 / 'FAIL' - 32

config check is finished: 'OK' - 75 / 'FAIL' - 28

config check is finished: 'OK' - 49 / 'FAIL' - 54

config check is finished: 'OK' - 42 / 'FAIL' - 61

config check is finished: 'OK' - 42 / 'FAIL' - 61

Refers to the issue #14 by @jcberthon.

Report them as FAIL.

Thanks to @Bernhard40 for this nice idea.

Refers to issue #13.

If HARDENED_USERCOPY is not set, HARDENED_USERCOPY_FALLBACK is not checked.

Refers to issue #13.

If PAGE_POISONING is not set, PAGE_POISONING_NO_SANITY and
PAGE_POISONING_ZERO are not checked.

Refers to issue #13.

Use case: AND(<suboption>, <main_option>).
Suboption is not checked if checking of the main_option is failed.

It's needed to solve issue #13.

I like this hack. Now the script recommends to disable modules and
devmem OR harden them at least.

Let's check the RESET_ATTACK_MITIGATION option.

The description of this security feature:
https://lwn.net/Articles/730006/

It needs support from the userspace side:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a5c03c31af2291f13689d11760c0b59fb70c9a5a

Improve the comments about the userspace support by the way.

CONFIG_MODULE_SIG_FORCE shouldn't be checked if CONFIG_MODULES is not set.

Fixes issue #12.
Thanks to @hannob.