Commits · 5559c0d8abf5554b246b50c46f4a1a4916484fba · fact-depend / kernel-hardening-checker · GitLab

14 Jan, 2019 6 commits
- Merge branch 'decision-cleanup' · 5559c0d8
```
Thanks to @Bernhard40 for a nice idea.
```
  Alexander Popov authored Jan 15, 2019
  5559c0d8 Browse Files
- Update README · 31e2c5e5
  Alexander Popov authored Jan 15, 2019
  
  31e2c5e5 Browse Files
- Change the last 'ubuntu18' checks (about lockdown) · f31d72a9
  Alexander Popov authored Jan 15, 2019
  
  f31d72a9 Browse Files
- Change 'decision' to 'grsecurity' for their additional 'cut_attack_surface' recommendations · 654b7375
  Alexander Popov authored Jan 15, 2019
  
  654b7375 Browse Files
- Change 'decision' to 'kspp' for non-default options recommended by KSPP · 2e33626c
  Alexander Popov authored Jan 15, 2019
  
  2e33626c Browse Files
- Change 'decision' to 'defconfig' for hardening features enabled by default · 84951bf6
  Alexander Popov authored Jan 15, 2019
  
  84951bf6 Browse Files
21 Dec, 2018 1 commit
- Add kernel command line options enabling mitigations of side-channel attacks · a5085a0d
  Alexander Popov authored Dec 21, 2018
  
  a5085a0d Browse Files
12 Dec, 2018 6 commits
- Add TODO (hardening preferences for ARM) and update README · 8289cd8c
  Alexander Popov authored Dec 13, 2018
  
  8289cd8c Browse Files
- Check x86 hardening features: X86_SMAP and X86_INTEL_UMIP · 6d850bea
  Alexander Popov authored Dec 13, 2018
  
  6d850bea Browse Files
- Add SECURITY_LOADPIN check · cf84449d
  Alexander Popov authored Dec 13, 2018
  
  cf84449d Browse Files
- Add SLAB_MERGE_DEFAULT check · bbe10a31
  Alexander Popov authored Dec 13, 2018
  
  bbe10a31 Browse Files
- Mention net.core.bpf_jit_harden · 2665d04c
  Alexander Popov authored Dec 13, 2018
  
  2665d04c Browse Files
- Recommend slub_debug=FZP · d7d81056
  Alexander Popov authored Dec 13, 2018
  
  d7d81056 Browse Files
07 Dec, 2018 2 commits
- Mark options connected with CONFIG_LOCK_DOWN_KERNEL (and add some new) · 796a2293
  Alexander Popov authored Dec 07, 2018
  
  796a2293 Browse Files
- Add CONFIG_LOCK_DOWN_KERNEL · 57b1cb15
  Alexander Popov authored Dec 07, 2018
  
  57b1cb15 Browse Files
05 Dec, 2018 1 commit
- Add a hint about gcc plugins support · 478e5f26
  Alexander Popov authored Dec 06, 2018
  
  478e5f26 Browse Files
08 Aug, 2018 6 commits
- Merge branch 'from-hackurx-3' · a4019f89
  Alexander Popov authored Aug 08, 2018
  
  a4019f89 Browse Files
- Move kspp-recommendations.config to config_files · cdbc8f0c
  Alexander Popov authored Aug 08, 2018
  
  cdbc8f0c Browse Files
- Add missing configs · 6a57f228
  Alexander Popov authored Aug 08, 2018
  
  6a57f228 Browse Files
- Fix links to configs · ca5031f5
  Alexander Popov authored Aug 08, 2018
  
  ca5031f5 Browse Files
- Update UEK config · d77c7a55
  Alexander Popov authored Aug 08, 2018
  
  d77c7a55 Browse Files
- Add links.txt · 42f18eb2
```
The file indicates where you can find kernel configurations.
```
  Loïc authored Jul 26, 2018
  42f18eb2 Browse Files
30 Jul, 2018 10 commits
- Minor fixes for the script output · a28331e0
  Alexander Popov authored Jul 30, 2018
  
  a28331e0 Browse Files
- Merge branch 'from-iad42-1' · 39077d81
  Alexander Popov authored Jul 30, 2018
  
  39077d81 Browse Files
- get_option_state function now looks a lot prettier using dict.get() method · a54cd3b8
  Anatoly Ivanov authored Jul 30, 2018
  
  a54cd3b8 Browse Files
- Made long lines in major output shorter · 99604da3
  Anatoly Ivanov authored Jul 30, 2018
  
  99604da3 Browse Files
- And update README · d5f427d5
  Alexander Popov authored Jul 30, 2018
  
  d5f427d5 Browse Files
- Add DEBUG_RODATA as old alternative to STRICT_KERNEL_RWX · f6fa3b38
  Alexander Popov authored Jul 30, 2018
  
  f6fa3b38 Browse Files
- Align lines better · c3569adf
  Alexander Popov authored Jul 30, 2018
  
  c3569adf Browse Files
- Add DEBUG_SET_MODULE_RONX as old alternative to STRICT_MODULE_RWX · d88babb1
  Alexander Popov authored Jul 30, 2018
  
  d88babb1 Browse Files
- Update the README (LKDTM is commented out) · 0d7325e1
  Alexander Popov authored Jul 30, 2018
  
  0d7325e1 Browse Files
- Update the function names according to the new meaning · 77c84a4b
  Alexander Popov authored Jul 30, 2018
  
  77c84a4b Browse Files
27 Jul, 2018 6 commits
- Merge branch 'from-hackurx-2' · ff74ed40
  Alexander Popov authored Jul 28, 2018
  
  ff74ed40 Browse Files
- Add debian-stretch.config · 849010d8
```
config check is NOT PASSED: 56 errors
```
  Loïc authored Jul 26, 2018
  849010d8 Browse Files
- Delete debian-sid-amd64.config · 25a1a5c3
  Loïc authored Jul 26, 2018
  
  25a1a5c3 Browse Files
- Delete Archlinux-Testing.config · de78d719
  Loïc authored Jul 26, 2018
  
  de78d719 Browse Files
- Add SLE15.config · 1a60bb96
```
Source: https://kernel.opensuse.org/cgit/kernel-source/plain/config/x86_64/default?h=SLE15

config check is NOT PASSED: 58 errors
```
  Loïc authored Jul 23, 2018
  1a60bb96 Browse Files
- Comment out LKDTM · 9606c107
  Alexander Popov authored Jul 28, 2018
  
  9606c107 Browse Files
25 Jul, 2018 2 commits
- Avoid false positive errors if CONFIG_MODULES is not set · e215fc9a
  Alexander Popov authored Jul 25, 2018
  
  e215fc9a Browse Files
- Support both versions of the STACKPROTECTOR_STRONG option · dd429b9b
  Alexander Popov authored Jul 25, 2018
  
  dd429b9b Browse Files