Commits · c69de43ed734068c7eb1b25e47c06192c023fe58 · fact-depend / kernel-hardening-checker

08 Jun, 2022 6 commits
- Turn some error conditions into assertions (part 3) · c69de43e
  Alexander Popov authored Jun 09, 2022
  
  c69de43e Browse Files
- Turn some error conditions into assertions (part 2) · 337f806f
  Alexander Popov authored Jun 09, 2022
  
  337f806f Browse Files
- Turn some error conditions into assertions (part 1) · 3ff6e747
  Alexander Popov authored Jun 09, 2022
  
  3ff6e747 Browse Files
- Drop useless checks, the ComplexOptCheck constructor has already checked this · 4def5a25
  Alexander Popov authored Jun 08, 2022
  
  4def5a25 Browse Files
- github actions: Test error handling (part 2) · 6734f7a3
```
And also test the tool without "-l".
```
  Alexander Popov authored Jun 08, 2022
  6734f7a3 Browse Files
- github actions: Test error handling (part 1) · 7795e4a6
  Alexander Popov authored Jun 08, 2022
  
  7795e4a6 Browse Files
30 May, 2022 8 commits
- github actions: Collect coverage for error handling (part 1) · fcf34162
  Alexander Popov authored May 31, 2022
  
  fcf34162 Browse Files
- github actions: upgrade to codecov-action@v2 · 6bd3f96f
  Alexander Popov authored May 31, 2022
  
  6bd3f96f Browse Files
- Check that --config and --print are not used together · bd7e2318
  Alexander Popov authored May 31, 2022
  
  bd7e2318 Browse Files
- github actions: Collect coverage for cmdline checking · e3503e95
  Alexander Popov authored May 31, 2022
  
  e3503e95 Browse Files
- github actions: Improve the descriptions · d782bdd4
  Alexander Popov authored May 30, 2022
  
  d782bdd4 Browse Files
- github actions: Improve the test output · 847c95bc
  Alexander Popov authored May 31, 2022
  
  847c95bc Browse Files
- Drop dash-separated values from setup.cfg · d2a931f9
  Alexander Popov authored May 30, 2022
  
  d2a931f9 Browse Files
- github actions: Add testing with python 3.9 · 87728fa8
  Alexander Popov authored May 30, 2022
  
  87728fa8 Browse Files
28 May, 2022 12 commits
- Merge branch 'cmdline' · 0db002da
```
This is the feature for #46.
```
  Alexander Popov authored May 28, 2022
  0db002da Browse Files
- Change the example output in README · 7831bae4
  Alexander Popov authored May 28, 2022
  
  7831bae4 Browse Files
- Describe the cmdline checking support in README · ef29eb0e
  Alexander Popov authored May 28, 2022
  
  ef29eb0e Browse Files
- Add the example config of Fedora 34 · 22bb83e2
  Alexander Popov authored May 28, 2022
  
  22bb83e2 Browse Files
- Check the pti cmdline parameter · 649272d2
  Alexander Popov authored May 28, 2022
  
  649272d2 Browse Files
- Check the slab_nomerge cmdline parameter · 4d49d01a
  Alexander Popov authored May 28, 2022
  
  4d49d01a Browse Files
- Check the randomize_kstack_offset cmdline parameter · 62433053
  Alexander Popov authored Mar 31, 2022
  
  62433053 Browse Files
- Add cmdline file parsing · e0ba3904
  Alexander Popov authored Mar 28, 2022
  
  e0ba3904 Browse Files
- Add the infrastructure for cmdline checks · aa073c2c
  Alexander Popov authored Mar 27, 2022
  
  aa073c2c Browse Files
- Add '--cmdline' argument for the tool · 7425f0e2
  Alexander Popov authored Mar 27, 2022
  
  7425f0e2 Browse Files
- Add cmdline checks to '--print' · 5fbc06fa
  Alexander Popov authored Mar 27, 2022
  
  5fbc06fa Browse Files
- Add the CmdlineCheck class · b9e670c3
  Alexander Popov authored Mar 27, 2022
  
  b9e670c3 Browse Files
15 May, 2022 2 commits
- Add the comment about sysrq_always_enabled · 12c2af7f
```
Thanks to @izh1979 for the idea (and for the rodata idea too).
```
  Alexander Popov authored May 15, 2022
  12c2af7f Browse Files
- Add the comment about rodata · 3e291ac8
  Alexander Popov authored May 15, 2022
  
  3e291ac8 Browse Files
08 May, 2022 1 commit
- Update direct feedback from Linux kernel maintainers (#62) · 6e92bdb3
  Alexander Popov authored May 08, 2022
  
  6e92bdb3 Browse Files
06 May, 2022 4 commits
- Add the comment about arm64.nomte · 3e7ab4f4
```
Thanks to @izh1979 for the idea.
```
  Alexander Popov authored May 07, 2022
  3e7ab4f4 Browse Files
- Add the comment about kernel.randomize_va_space · 9d342aac
```
Thanks to @izh1979 for the idea.
```
  Alexander Popov authored May 07, 2022
  9d342aac Browse Files
- Add the KGDB check · dfad55c4
```
Thanks to @izh1979 for the idea.
```
  Alexander Popov authored May 06, 2022
  dfad55c4 Browse Files
- Add RANDOMIZE_MODULE_REGION_FULL for arm64 · f305cc9c
```
Thanks to @izh1979 for the idea.
```
  Alexander Popov authored May 06, 2022
  f305cc9c Browse Files
28 Apr, 2022 3 commits
- Update the README · 87db8c4f
```
Ready for the release 0.5.17.
```
  Alexander Popov authored Apr 28, 2022
  87db8c4f Browse Files
- Merge pull request #62 from evdenis/master · 80d998f6
```
Add BLK_DEV_FD_RAWCMD

Thanks @evdenis!
```
  Alexander Popov authored Apr 28, 2022
  80d998f6 Browse Files
- Add the type property for OptCheck to fix a pylint error · c8790134
```
Fix for kconfig_hardened_check/__init__.py:125:68: E1101:
  Instance of 'OptCheck' has no 'type' member (no-member)
```
  Alexander Popov authored Apr 28, 2022
  c8790134 Browse Files
27 Apr, 2022 1 commit

See commit torvalds/linux@233087ca0636 ("floppy: disable FDRAWCMD by default")

Signed-off-by: Denis Efremov <efremov@linux.com>

authored Apr 27, 2022

bbe60e75 Browse Files

22 Apr, 2022 3 commits
- Add the STACKPROTECTOR check from KSPP · 61bfef89
```
Thanks to @izh1979 for the idea.
```
  Alexander Popov authored Apr 22, 2022
  61bfef89 Browse Files
- Drop the ARM64_MTE check for userspace hardening · 6f4d9379
```
It is moved to kernel self protection.

Thanks to @izh1979 for the idea.
```
  Alexander Popov authored Apr 22, 2022
  6f4d9379 Browse Files
- Separate out checking SECURITY_WRITABLE_HOOKS and SECURITY_SELINUX_DISABLE · 4444a0b7
```
Thanks to @izh1979 for the idea.
Combining these checks with OR is not correct.
```
  Alexander Popov authored Apr 22, 2022
  4444a0b7 Browse Files