projects
/
kconfig-hardened-check.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
Add the comment about sysrq_always_enabled
[kconfig-hardened-check.git]
/
kconfig_hardened_check
/
__init__.py
diff --git
a/kconfig_hardened_check/__init__.py
b/kconfig_hardened_check/__init__.py
index 8daa93461f5a39d93f94261b5156a2e54df3c72c..9b3c94c6c33cf0f062233a7d80f2dc8da5470ec1 100644
(file)
--- a/
kconfig_hardened_check/__init__.py
+++ b/
kconfig_hardened_check/__init__.py
@@
-40,8
+40,11
@@
#
# Should NOT be set:
# nokaslr
#
# Should NOT be set:
# nokaslr
+# rodata=off
+# sysrq_always_enabled
# arm64.nobti
# arm64.nopauth
# arm64.nobti
# arm64.nopauth
+# arm64.nomte
#
# Hardware tag-based KASAN with arm64 Memory Tagging Extension (MTE):
# kasan=on
#
# Hardware tag-based KASAN with arm64 Memory Tagging Extension (MTE):
# kasan=on