- 17 Sep, 2023 7 commits
-
-
Alexander Popov authored
-
**kconfig-hardened-check** is a tool for checking the security hardening options of the Linux kernel. In addition to Kconfig options, it now can check kernel cmdline arguments and sysctl parameters. It's time to give this project a new name that describes it better: **kernel-hardening-checker**.
Alexander Popov authored -
Alexander Popov authored
-
Alexander Popov authored
-
Alexander Popov authored
-
AND(AND()), OR(OR()) are not supported intentionally.
Alexander Popov authored -
Alexander Popov authored
-
- 16 Sep, 2023 2 commits
-
-
(The nested AND/OR should be tested separately, stay tuned)
Alexander Popov authored -
Alexander Popov authored
-
- 13 Sep, 2023 2 commits
-
-
This rewrites the commit aa7e1bff. Refers to #86.
Alexander Popov authored -
Shows OK in green and FAIL in red Thanks to @frakman1. Refers to #81. Needs fixing `test_stdout()` in the unit-test.
Alexander Popov authored
-
- 12 Sep, 2023 1 commit
-
-
Frak authored
-
- 11 Sep, 2023 1 commit
-
-
Frak authored
-
- 10 Sep, 2023 2 commits
- 09 Sep, 2023 3 commits
- 03 Sep, 2023 1 commit
-
-
By the way, don't add `if arch` for checks that require 'is not set' (there is nothing wrong with that).
Alexander Popov authored
-
- 28 Aug, 2023 3 commits
-
-
Drop `> /dev/null` for non-verbose output of the tool.
Alexander Popov authored -
Alexander Popov authored
-
Alexander Popov authored
-
- 27 Aug, 2023 1 commit
-
-
Alexander Popov authored
-
- 14 Aug, 2023 9 commits
-
-
Alexander Popov authored
-
Alexander Popov authored
-
Alexander Popov authored
-
Alexander Popov authored
-
Alexander Popov authored
-
Alexander Popov authored
-
It always runs as a main program.
Alexander Popov authored -
Alexander Popov authored
-
Alexander Popov authored
-
- 13 Aug, 2023 8 commits
-
-
Alexander Popov authored
-
This file was made with root privileges, so it has a full list of sysctls.
Alexander Popov authored -
Alexander Popov authored
-
The GitHub Actions virtual machine has such a sysctl: fs.binfmt_misc.llvm-14-runtime/binfmt = enabled This example shows that sysctl names may contain the / symbol.
Alexander Popov authored -
Refers to #65
Alexander Popov authored -
Alexander Popov authored
-
Alexander Popov authored
-
Alexander Popov authored
-