Commits · a5085a0dacaa2c725df7aaa3a77005687cabe1ff · fact-depend / kernel-hardening-checker · GitLab

21 Dec, 2018 1 commit
- Add kernel command line options enabling mitigations of side-channel attacks · a5085a0d
  Alexander Popov authored Dec 21, 2018
  
  a5085a0d Browse Files
12 Dec, 2018 6 commits
- Add TODO (hardening preferences for ARM) and update README · 8289cd8c
  Alexander Popov authored Dec 13, 2018
  
  8289cd8c Browse Files
- Check x86 hardening features: X86_SMAP and X86_INTEL_UMIP · 6d850bea
  Alexander Popov authored Dec 13, 2018
  
  6d850bea Browse Files
- Add SECURITY_LOADPIN check · cf84449d
  Alexander Popov authored Dec 13, 2018
  
  cf84449d Browse Files
- Add SLAB_MERGE_DEFAULT check · bbe10a31
  Alexander Popov authored Dec 13, 2018
  
  bbe10a31 Browse Files
- Mention net.core.bpf_jit_harden · 2665d04c
  Alexander Popov authored Dec 13, 2018
  
  2665d04c Browse Files
- Recommend slub_debug=FZP · d7d81056
  Alexander Popov authored Dec 13, 2018
  
  d7d81056 Browse Files
07 Dec, 2018 2 commits
- Mark options connected with CONFIG_LOCK_DOWN_KERNEL (and add some new) · 796a2293
  Alexander Popov authored Dec 07, 2018
  
  796a2293 Browse Files
- Add CONFIG_LOCK_DOWN_KERNEL · 57b1cb15
  Alexander Popov authored Dec 07, 2018
  
  57b1cb15 Browse Files
05 Dec, 2018 1 commit
- Add a hint about gcc plugins support · 478e5f26
  Alexander Popov authored Dec 06, 2018
  
  478e5f26 Browse Files
08 Aug, 2018 6 commits
- Merge branch 'from-hackurx-3' · a4019f89
  Alexander Popov authored Aug 08, 2018
  
  a4019f89 Browse Files
- Move kspp-recommendations.config to config_files · cdbc8f0c
  Alexander Popov authored Aug 08, 2018
  
  cdbc8f0c Browse Files
- Add missing configs · 6a57f228
  Alexander Popov authored Aug 08, 2018
  
  6a57f228 Browse Files
- Fix links to configs · ca5031f5
  Alexander Popov authored Aug 08, 2018
  
  ca5031f5 Browse Files
- Update UEK config · d77c7a55
  Alexander Popov authored Aug 08, 2018
  
  d77c7a55 Browse Files
- Add links.txt · 42f18eb2
```
The file indicates where you can find kernel configurations.
```
  Loïc authored Jul 26, 2018
  42f18eb2 Browse Files
30 Jul, 2018 10 commits
- Minor fixes for the script output · a28331e0
  Alexander Popov authored Jul 30, 2018
  
  a28331e0 Browse Files
- Merge branch 'from-iad42-1' · 39077d81
  Alexander Popov authored Jul 30, 2018
  
  39077d81 Browse Files
- get_option_state function now looks a lot prettier using dict.get() method · a54cd3b8
  Anatoly Ivanov authored Jul 30, 2018
  
  a54cd3b8 Browse Files
- Made long lines in major output shorter · 99604da3
  Anatoly Ivanov authored Jul 30, 2018
  
  99604da3 Browse Files
- And update README · d5f427d5
  Alexander Popov authored Jul 30, 2018
  
  d5f427d5 Browse Files
- Add DEBUG_RODATA as old alternative to STRICT_KERNEL_RWX · f6fa3b38
  Alexander Popov authored Jul 30, 2018
  
  f6fa3b38 Browse Files
- Align lines better · c3569adf
  Alexander Popov authored Jul 30, 2018
  
  c3569adf Browse Files
- Add DEBUG_SET_MODULE_RONX as old alternative to STRICT_MODULE_RWX · d88babb1
  Alexander Popov authored Jul 30, 2018
  
  d88babb1 Browse Files
- Update the README (LKDTM is commented out) · 0d7325e1
  Alexander Popov authored Jul 30, 2018
  
  0d7325e1 Browse Files
- Update the function names according to the new meaning · 77c84a4b
  Alexander Popov authored Jul 30, 2018
  
  77c84a4b Browse Files
27 Jul, 2018 6 commits
- Merge branch 'from-hackurx-2' · ff74ed40
  Alexander Popov authored Jul 28, 2018
  
  ff74ed40 Browse Files
- Add debian-stretch.config · 849010d8
```
config check is NOT PASSED: 56 errors
```
  Loïc authored Jul 26, 2018
  849010d8 Browse Files
- Delete debian-sid-amd64.config · 25a1a5c3
  Loïc authored Jul 26, 2018
  
  25a1a5c3 Browse Files
- Delete Archlinux-Testing.config · de78d719
  Loïc authored Jul 26, 2018
  
  de78d719 Browse Files
- Add SLE15.config · 1a60bb96
```
Source: https://kernel.opensuse.org/cgit/kernel-source/plain/config/x86_64/default?h=SLE15

config check is NOT PASSED: 58 errors
```
  Loïc authored Jul 23, 2018
  1a60bb96 Browse Files
- Comment out LKDTM · 9606c107
  Alexander Popov authored Jul 28, 2018
  
  9606c107 Browse Files
25 Jul, 2018 2 commits
- Avoid false positive errors if CONFIG_MODULES is not set · e215fc9a
  Alexander Popov authored Jul 25, 2018
  
  e215fc9a Browse Files
- Support both versions of the STACKPROTECTOR_STRONG option · dd429b9b
  Alexander Popov authored Jul 25, 2018
  
  dd429b9b Browse Files
24 Jul, 2018 6 commits
- Merge branch 'OR-from-anthraxx' · 67945c65
  Alexander Popov authored Jul 25, 2018
  
  67945c65 Browse Files
- Update the README · 6d7703f4
  Alexander Popov authored Jul 25, 2018
  
  6d7703f4 Browse Files
- Improve the OR result calculation · 7edb9d25
```
1. don't duplicate opts[0].name in the successful output;
2. fix the bug with printing None state, just reuse the OptCheck.result.
```
  Alexander Popov authored Jul 25, 2018
  7edb9d25 Browse Files
- Adjust the output format · cc52eb9b
  Alexander Popov authored Jul 25, 2018
  
  cc52eb9b Browse Files
- support DEVMEM not set when considering STRICT_DEVMEM/IO_STRICT_DEVMEM · 660a4a5c
```
Detect STRICT_DEVMEM and IO_STRICT_DEVMEM as not being needed whenever
DEVMEM is not set.

Conflicts resolved by @a13xp0p0v
```
  anthraxx authored Jun 26, 2018
  660a4a5c Browse Files
- Add the comment describing OR use case · 885eca86
  Alexander Popov authored Jul 24, 2018
  
  885eca86 Browse Files