+ # 'cut_attack_surface', 'grsec'
+ # The cmdline checks compatible with the kconfig options disabled by grsecurity...
+ l += [OR(CmdlineCheck('cut_attack_surface', 'grsec', 'debugfs', 'off'),
+ KconfigCheck('cut_attack_surface', 'grsec', 'DEBUG_FS', 'is not set'))] # ... the end