Thanks to @izh1979 for the idea (and for the rodata idea too).

Thanks to @izh1979 for the idea.

Thanks to @izh1979 for the idea.

Thanks to @izh1979 for the idea.

Thanks to @izh1979 for the idea.

Ready for the release 0.5.17.

Add BLK_DEV_FD_RAWCMD

Thanks @evdenis!

Fix for kconfig_hardened_check/__init__.py:125:68: E1101:
  Instance of 'OptCheck' has no 'type' member (no-member)

See commit torvalds/linux@233087ca0636 ("floppy: disable FDRAWCMD by default")

Signed-off-by: Denis Efremov <efremov@linux.com>

Thanks to @izh1979 for the idea.

It is moved to kernel self protection.

Thanks to @izh1979 for the idea.

Thanks to @izh1979 for the idea.
Combining these checks with OR is not correct.

Before the fix:
CONFIG_EFI_DISABLE_PCI_DMA | kconfig | y | clipos | self_protection | OK: not found

After the fix:
CONFIG_EFI_DISABLE_PCI_DMA | kconfig | y | clipos | self_protection | OK: CONFIG_EFI not found

Also added the assertions preventing similar bugs in future.