Commits · f58e98ef1d6ab91602b688565daf98633855439d · fact-depend / kernel-hardening-checker

04 Jul, 2018 1 commit
- More decisions on kernel options · f58e98ef
  Alexander Popov authored Jul 04, 2018
  
  f58e98ef Browse Files
03 Jul, 2018 1 commit
- Add Oracle Unbreakable Enterprise Kernel 5 (UEK-5) config · 60818a26
  Alexander Popov authored Jul 03, 2018
  
  60818a26 Browse Files
22 Jun, 2018 1 commit
- Drop CONFIG_DEBUG_KERNEL from kspp-recommendations.config · 918817dd
```
It is needed only for kernels prior to v4.11 (Kees has updated the wiki)
```
  Alexander Popov authored Jun 22, 2018
  918817dd Browse Files
20 Jun, 2018 3 commits

Disable buggy IP_SCTP to cut attack surface · b68eb59c
Alexander Popov authored Jun 21, 2018

b68eb59c Browse Files
Disable only CONFIG_USER_NS, not whole CONFIG_NAMESPACES · b6ee2f57
```
Thanks to @Bernhard40 for the correction

Signed-off-by: Alexander Popov <alex.popov@linux.com>
```
Alexander Popov authored Jun 21, 2018
b6ee2f57 Browse Files

Add kconfig-hardened-check.py · 6b25acb5

This script helps me to check the Linux kernel Kconfig option list
against my hardening preferences for x86_64.

Nobody likes checking configs manually. Let the computers do their job!

Signed-off-by: Alexander Popov <alex.popov@linux.com>

authored Jun 20, 2018

6b25acb5 Browse Files