Commits · a91195e72547a6975404c50685b8acd00e1aa823 · fact-depend / kernel-hardening-checker · GitLab

17 Jul, 2022 3 commits
- Check ARM64_BTI for userspace hardening · a91195e7
  Alexander Popov authored Jul 17, 2022
  
  a91195e7 Browse Files
- Check ARM64_PTR_AUTH for userspace hardening · 594fcd1c
  Alexander Popov authored Jul 17, 2022
  
  594fcd1c Browse Files
- Add rodata check for ARM64 · 9cdd06a1
  Alexander Popov authored Jul 17, 2022
  
  9cdd06a1 Browse Files
11 Jul, 2022 4 commits
- Add iommu.passthrough check · b6930eae
  Alexander Popov authored Jul 11, 2022
  
  b6930eae Browse Files
- Add IOMMU_DEFAULT_PASSTHROUGH check · 1300fb0e
  Alexander Popov authored Jul 11, 2022
  
  1300fb0e Browse Files
- Add iommu.strict check · f4889500
  Alexander Popov authored Jul 11, 2022
  
  f4889500 Browse Files
- Add vsyscall check · 4ed45348
  Alexander Popov authored Jul 11, 2022
  
  4ed45348 Browse Files
09 Jul, 2022 2 commits
- Don't add CmdlineChecks in add_kconfig_checks() to avoid wrong results · 3ee12f0b
  Alexander Popov authored Jul 10, 2022
  
  3ee12f0b Browse Files
- Add slub_debug check · 3c1e4cca
  Alexander Popov authored Jul 10, 2022
  
  3c1e4cca Browse Files
08 Jul, 2022 1 commit
- Add the release badge · a316a3e8
  Alexander Popov authored Jul 09, 2022
  
  a316a3e8 Browse Files
20 Jun, 2022 4 commits
- Add the init_on_free check · 6c2257f4
  Alexander Popov authored Jun 20, 2022
  
  6c2257f4 Browse Files
- Add the page_poison check required for PAGE_POISONING_ZERO · ff64053d
  Alexander Popov authored Jun 20, 2022
  
  ff64053d Browse Files
- Rewrite the slab_nomerge check · 0b522bd1
```
Use the presence check for slab_nomerge.
Also check that slab_merge is not set.
```
  Alexander Popov authored Jun 20, 2022
  0b522bd1 Browse Files
- Rewrite the randomize_kstack_offset check · 745742b3
```
Reusing "is not set" for CmdlineCheck is a nice hack.
```
  Alexander Popov authored Jun 20, 2022
  745742b3 Browse Files
19 Jun, 2022 3 commits
- Check that a kconfig option value is sane · ba678bf3
  Alexander Popov authored Jun 19, 2022
  
  ba678bf3 Browse Files
- Add a tricky check for init_on_alloc and INIT_ON_ALLOC_DEFAULT_ON · 05113077
```
Nice!
```
  Alexander Popov authored Jun 19, 2022
  05113077 Browse Files
- Move the add_cmdline_checks() call earlier · a23725c2
```
populate_with_data() must be called after all checks have been added.
```
  Alexander Popov authored Jun 19, 2022
  a23725c2 Browse Files
08 Jun, 2022 10 commits
- Don't check __name__ in __init__.py (it can't run separately anyway) · 98fb9d97
  Alexander Popov authored Jun 09, 2022
  
  98fb9d97 Browse Files
- Fix the pylint warning about isinstance · 58cc1a05
  Alexander Popov authored Jun 09, 2022
  
  58cc1a05 Browse Files
- Drop unneeded properties of ComplexOptCheck · 92a65445
```
Thanks to the coverage info
```
  Alexander Popov authored Jun 09, 2022
  92a65445 Browse Files
- Turn some error conditions into assertions (part 4) · 55164d26
  Alexander Popov authored Jun 09, 2022
  
  55164d26 Browse Files
- Turn some error conditions into assertions (part 3) · c69de43e
  Alexander Popov authored Jun 09, 2022
  
  c69de43e Browse Files
- Turn some error conditions into assertions (part 2) · 337f806f
  Alexander Popov authored Jun 09, 2022
  
  337f806f Browse Files
- Turn some error conditions into assertions (part 1) · 3ff6e747
  Alexander Popov authored Jun 09, 2022
  
  3ff6e747 Browse Files
- Drop useless checks, the ComplexOptCheck constructor has already checked this · 4def5a25
  Alexander Popov authored Jun 08, 2022
  
  4def5a25 Browse Files
- github actions: Test error handling (part 2) · 6734f7a3
```
And also test the tool without "-l".
```
  Alexander Popov authored Jun 08, 2022
  6734f7a3 Browse Files
- github actions: Test error handling (part 1) · 7795e4a6
  Alexander Popov authored Jun 08, 2022
  
  7795e4a6 Browse Files
30 May, 2022 8 commits
- github actions: Collect coverage for error handling (part 1) · fcf34162
  Alexander Popov authored May 31, 2022
  
  fcf34162 Browse Files
- github actions: upgrade to codecov-action@v2 · 6bd3f96f
  Alexander Popov authored May 31, 2022
  
  6bd3f96f Browse Files
- Check that --config and --print are not used together · bd7e2318
  Alexander Popov authored May 31, 2022
  
  bd7e2318 Browse Files
- github actions: Collect coverage for cmdline checking · e3503e95
  Alexander Popov authored May 31, 2022
  
  e3503e95 Browse Files
- github actions: Improve the descriptions · d782bdd4
  Alexander Popov authored May 30, 2022
  
  d782bdd4 Browse Files
- github actions: Improve the test output · 847c95bc
  Alexander Popov authored May 31, 2022
  
  847c95bc Browse Files
- Drop dash-separated values from setup.cfg · d2a931f9
  Alexander Popov authored May 30, 2022
  
  d2a931f9 Browse Files
- github actions: Add testing with python 3.9 · 87728fa8
  Alexander Popov authored May 30, 2022
  
  87728fa8 Browse Files
28 May, 2022 5 commits
- Merge branch 'cmdline' · 0db002da
```
This is the feature for #46.
```
  Alexander Popov authored May 28, 2022
  0db002da Browse Files
- Change the example output in README · 7831bae4
  Alexander Popov authored May 28, 2022
  
  7831bae4 Browse Files
- Describe the cmdline checking support in README · ef29eb0e
  Alexander Popov authored May 28, 2022
  
  ef29eb0e Browse Files
- Add the example config of Fedora 34 · 22bb83e2
  Alexander Popov authored May 28, 2022
  
  22bb83e2 Browse Files
- Check the pti cmdline parameter · 649272d2
  Alexander Popov authored May 28, 2022
  
  649272d2 Browse Files