Commits · 466b9a8475b081f22af811adda735d083c8f2b47 · fact-depend / kernel-hardening-checker · GitLab

14 Feb, 2022 4 commits
- Rename VerCheck to VersionCheck · 466b9a84
  Alexander Popov authored Feb 14, 2022
  
  466b9a84 Browse Files
- Add more ComplexOptCheck validation · d0b69420
  Alexander Popov authored Feb 14, 2022
  
  d0b69420 Browse Files
- Improve print_unknown_options() · 866d3c07
```
Don't miss options behind the second level of ComplexOptCheck
```
  Alexander Popov authored Feb 14, 2022
  866d3c07 Browse Files
- Remove 'CONFIG_' hardcoding · 70975c39
  Alexander Popov authored Feb 14, 2022
  
  70975c39 Browse Files
11 Feb, 2022 3 commits
- Merge branch 'refactoring' · 66dcf26d
```
It has preparations for solving #46.
```
  Alexander Popov authored Feb 12, 2022
  66dcf26d Browse Files
- Refactor the OR logic code · 3d9f2f8b
  Alexander Popov authored Feb 12, 2022
  
  3d9f2f8b Browse Files
- Rename config to kconfig where needed (part II) · 922ac4d7
  Alexander Popov authored Feb 11, 2022
  
  922ac4d7 Browse Files
22 Jan, 2022 4 commits
- Extract populate_with_data() from perform_checks() · f4ecbe8a
  Alexander Popov authored Jan 23, 2022
  
  f4ecbe8a Browse Files
- Rename config to kconfig where needed · 55690d46
  Alexander Popov authored Jan 23, 2022
  
  55690d46 Browse Files
- Print the type of a check in the json mode · 3b428f9b
  Alexander Popov authored Jan 23, 2022
  
  3b428f9b Browse Files
- ComplexOptCheck type has the type of the first opt in it · 544d7841
  Alexander Popov authored Jan 23, 2022
  
  544d7841 Browse Files
21 Jan, 2022 8 commits
- Update the example output in the README (yes, now I like it!) · b12077a9
  Alexander Popov authored Jan 22, 2022
  
  b12077a9 Browse Files
- Do more output tuning · ad724694
  Alexander Popov authored Jan 22, 2022
  
  ad724694 Browse Files
- Update the example output in the README · 9049d3fa
  Alexander Popov authored Jan 22, 2022
  
  9049d3fa Browse Files
- Add check type · 6bd5fe15
  Alexander Popov authored Jan 22, 2022
  
  6bd5fe15 Browse Files
- Update the example output in the README · 25f10dd0
  Alexander Popov authored Jan 22, 2022
  
  25f10dd0 Browse Files
- Print compactly · 33c6dcbf
  Alexander Popov authored Jan 22, 2022
  
  33c6dcbf Browse Files
- Introduce KconfigCheck class · 5e9f4868
  Alexander Popov authored Jan 22, 2022
  
  5e9f4868 Browse Files
- Fix TRIM_UNUSED_KSYMS check · 7ed482ba
```
TRIM_UNUSED_KSYMS can't be enabled if MODULES are disabled.

Thanks to @Churam for reporting.
Refers to #58.
```
  Alexander Popov authored Jan 21, 2022
  7ed482ba Browse Files
24 Dec, 2021 1 commit
- Add l1d_flush (for future reference) · 1076c7b8
  Alexander Popov authored Dec 24, 2021
  
  1076c7b8 Browse Files
05 Dec, 2021 1 commit
- Add ARM64_PTR_AUTH_KERNEL extracted from ARM64_PTR_AUTH · 3e435f08
  Alexander Popov authored Dec 05, 2021
  
  3e435f08 Browse Files
21 Nov, 2021 2 commits
- Document the output modes specified by the `-m` parameter · 69b66ef3
  Alexander Popov authored Nov 21, 2021
  
  69b66ef3 Browse Files
- TODO: RISC-V · d8d144c1
```
See #56
```
  Alexander Popov authored Nov 21, 2021
  d8d144c1 Browse Files
09 Nov, 2021 8 commits
- Update the README (a lot of new checks appeared) · 7cfd2088
  Alexander Popov authored Nov 09, 2021
  
  7cfd2088 Browse Files
- Keep the old X86_PTDUMP check as a backup · 96770e5b
  Alexander Popov authored Nov 09, 2021
  
  96770e5b Browse Files
- Simplify the check about PTDUMP_DEBUGFS (I was correct) · 406370ec
  Alexander Popov authored Nov 09, 2021
  
  406370ec Browse Files
- Add more checks from grsecurity for cutting attack surface (part II) · 39c7c286
```
This includes:
 - KCMP
 - RSEQ
 - LATENCYTOP
 - KCOV
 - PROVIDE_OHCI1394_DMA_INIT
 - SUNRPC_DEBUG
 - FAIL_FUTEX
 - KPROBE_EVENTS
 - UPROBE_EVENTS
 - FUNCTION_TRACER
 - STACK_TRACER
 - HIST_TRIGGERS
 - BLK_DEV_IO_TRACE
```
  Alexander Popov authored Nov 09, 2021
  39c7c286 Browse Files
- Fix the 'decision' field of the IO_URING check · 557ddaa2
```
grsecurity disables IO_URING as well to cut attack surface
```
  Alexander Popov authored Nov 09, 2021
  557ddaa2 Browse Files
- Add more checks from grsecurity for cutting attack surface (part I) · b20ddead
```
This includes:
 - PUNIT_ATOM_DEBUG
 - ACPI_CONFIGFS
 - EDAC_DEBUG
 - DRM_I915_DEBUG
 - BCACHE_CLOSURES_DEBUG
 - DVB_C8SECTPFE
 - MTD_SLRAM
 - MTD_PHRAM
```
  Alexander Popov authored Nov 09, 2021
  b20ddead Browse Files
- Fix the 'decision' field of the KPROBES check · b73ae3cf
  Alexander Popov authored Nov 09, 2021
  
  b73ae3cf Browse Files
- Add the comment · e39d5081
  Alexander Popov authored Nov 09, 2021
  
  e39d5081 Browse Files
23 Sep, 2021 3 commits
- Improve the README · 4f54f766
  Alexander Popov authored Sep 23, 2021
  
  4f54f766 Browse Files
- Get a bit more coverage · 35f1bcd1
  Alexander Popov authored Sep 23, 2021
  
  35f1bcd1 Browse Files
- Update the README · 78a91671
```
Ready for the release 0.5.14.
```
  Alexander Popov authored Sep 23, 2021
  78a91671 Browse Files
22 Sep, 2021 1 commit
- Move 'self_protection' & 'maintainer' higher · 98476021
  Alexander Popov authored Sep 22, 2021
  
  98476021 Browse Files
21 Sep, 2021 4 commits
- Add HARDENED_USERCOPY_PAGESPAN check from KSPP · 3da1225a
  Alexander Popov authored Sep 21, 2021
  
  3da1225a Browse Files
- Add comments about the maintainer recommendations · 5a149f0d
```
Refers to #53
```
  Alexander Popov authored Sep 21, 2021
  5a149f0d Browse Files
- Fix UBSAN_BOUNDS recommendations · 173e65ef
```
Thanks to @kees and @equaeghe

Refers to #53
```
  Alexander Popov authored Sep 21, 2021
  173e65ef Browse Files
- RANDOMIZE_KSTACK_OFFSET_DEFAULT is recommended by KSPP · aa44db62
```
Thanks to @anthraxx
```
  Alexander Popov authored Sep 21, 2021
  aa44db62 Browse Files
16 Sep, 2021 1 commit
- Update the KSPP recommendations · 6d0bc7d9
  Alexander Popov authored Sep 16, 2021
  
  6d0bc7d9 Browse Files