Thanks to @izh1979 for the idea (and for the rodata idea too).

Thanks to @izh1979 for the idea.

Thanks to @izh1979 for the idea.

Thanks to @izh1979 for the idea.

Thanks to @izh1979 for the idea.

Ready for the release 0.5.17.

Add BLK_DEV_FD_RAWCMD

Thanks @evdenis!

Fix for kconfig_hardened_check/__init__.py:125:68: E1101:
  Instance of 'OptCheck' has no 'type' member (no-member)

See commit torvalds/linux@233087ca0636 ("floppy: disable FDRAWCMD by default")

Signed-off-by: Denis Efremov <efremov@linux.com>

Thanks to @izh1979 for the idea.

It is moved to kernel self protection.

Thanks to @izh1979 for the idea.

Thanks to @izh1979 for the idea.
Combining these checks with OR is not correct.

Before the fix:
CONFIG_EFI_DISABLE_PCI_DMA | kconfig | y | clipos | self_protection | OK: not found

After the fix:
CONFIG_EFI_DISABLE_PCI_DMA | kconfig | y | clipos | self_protection | OK: CONFIG_EFI not found

Also added the assertions preventing similar bugs in future.

ARCH_HAS_UBSAN_SANITIZE_ALL is not selected for arm arch, which
prevents selectiong of CONFIG_UBSAN_SANITIZE_ALL

https://github.com/torvalds/linux/blob/master/arch/arm/Kconfig
https://github.com/torvalds/linux/blob/master/lib/Kconfig.ubsan

Refers to #59.

Thanks @cyanidium

Both EFI_DISABLE_PCI_DMA and RESET_ATTACK_MITIGATION depend on EFI, but if EFI is not set, neither config is required.

Useful on embedded devices that use u-boot or similar instead of EFI.