- checklist.append(modules_not_set)
- checklist.append(devmem_not_set)
- checklist.append(OR(OptCheck('cut_attack_surface', 'kspp', 'IO_STRICT_DEVMEM', 'y'), \
- devmem_not_set)) # refers to LOCKDOWN
- if arch == 'ARM':
- checklist.append(OR(OptCheck('cut_attack_surface', 'kspp', 'STRICT_DEVMEM', 'y'), \
- devmem_not_set)) # refers to LOCKDOWN
- if arch == 'X86_64':
- checklist.append(OptCheck('cut_attack_surface', 'kspp', 'LEGACY_VSYSCALL_NONE', 'y')) # 'vsyscall=none'