Skip to content

K
kernel-hardening-checker
Switch branch/tag
You can move around the graph by using the arrow keys.
Created with Raphaël 2.2.022Apr2098728Mar272119151413515Feb14121123Jan222124Dec521Nov923Sep222116111030Aug29201914982Jul19Jun1830Oct2923222119161416Jul15131097330May759Apr86331Mar302927262423222018179875427Feb262414Jan11102Dec29Nov2823Aug228Jul724Jun543127May171220Mar131211424Jan2322211521Dec13768Aug30Jul282524201454322Jun2120Disabling X86_MSR is recommended by KSPPFix the bug in the verdict description for ComplexOptCheckAdditional check for TYPES_OF_CHECKSDrop PresenceCheck; OptCheck without 'expected' parameter can do the jobUpdate the KSPP recommendations in the config_filesAdd the KSPP recommendation of SCHED_COREAdd the KSPP recommendation of IOMMU_DEFAULT_DMA_STRICTAdd the KSPP recommendation of WERRORAdd the KSPP recommendation of KFENCENo need in BPF_UNPRIV_DEFAULT_OFF if BPF_SYSCALL is disabledMerge branch 'from-martin-rowe'Add defconfigs for Linux v5.17Drop unneeded return values (refactoring)UBSAN_SANITIZE_ALL not available on ARMAdd HARDEN_BRANCH_HISTORY for armAdd MITIGATE_SPECTRE_BRANCH_HISTORY for arm64THREAD_INFO_IN_TASK is available for ARM since v5.16Merge branch 'from-martin-rowe'EFI mitigations can't be enabled if EFI is not setFix the BPF_UNPRIV_DEFAULT_OFF check (it is enabled by default)Add CONFIG_SLS vs CVE-2021-26341 in Straight-Line-SpeculationAdd the comment that l1d_flush is a part of the l1tf optionAdd BPF_UNPRIV_DEFAULT_OFF to cut_attack_surfaceUse the option type instead of calling hasattr()Merge branch 'refactoring'Introduce the json_dump() class methodImprove 'type' for ComplexOptCheck and PresenceCheck classesMake populate_with_data() aware of data typeAdd 'type' for PresenceCheck and VersionCheckRename VerCheck to VersionCheckAdd more ComplexOptCheck validationImprove print_unknown_options()Remove 'CONFIG_' hardcodingMerge branch 'refactoring'Refactor the OR logic codeRename config to kconfig where needed (part II)Extract populate_with_data() from perform_checks()Rename config to kconfig where neededPrint the type of a check in the json modeComplexOptCheck type has the type of the first opt in it