projects
/
kconfig-hardened-check.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
Drop __about__.py and use 'version = attr:' in setup.cfg
[kconfig-hardened-check.git]
/
kernel_hardening_checker
/
checks.py
diff --git
a/kernel_hardening_checker/checks.py
b/kernel_hardening_checker/checks.py
index ab2432e327d7afd7ecd322ee71f66559a3e2885e..d910698c7e26a965517c8a726074cbc5a871f008 100644
(file)
--- a/
kernel_hardening_checker/checks.py
+++ b/
kernel_hardening_checker/checks.py
@@
-11,11
+11,11
@@
This module contains knowledge for checks.
# pylint: disable=missing-function-docstring,line-too-long,invalid-name
# pylint: disable=too-many-branches,too-many-statements,too-many-locals
# pylint: disable=missing-function-docstring,line-too-long,invalid-name
# pylint: disable=too-many-branches,too-many-statements,too-many-locals
-from .engine import StrOrNone, KconfigCheck, CmdlineCheck, SysctlCheck, VersionCheck, OR, AND
from typing import List
from typing import List
+from .engine import StrOrNone, ChecklistObjType, KconfigCheck, CmdlineCheck, SysctlCheck, VersionCheck, OR, AND
-def add_kconfig_checks(l: List, arch: str) -> None:
+def add_kconfig_checks(l: List
[ChecklistObjType]
, arch: str) -> None:
assert(arch), 'empty arch'
# Calling the KconfigCheck class constructor:
assert(arch), 'empty arch'
# Calling the KconfigCheck class constructor:
@@
-423,7
+423,7
@@
def add_kconfig_checks(l: List, arch: str) -> None:
l += [KconfigCheck('harden_userspace', 'a13xp0p0v', 'X86_USER_SHADOW_STACK', 'y')]
l += [KconfigCheck('harden_userspace', 'a13xp0p0v', 'X86_USER_SHADOW_STACK', 'y')]
-def add_cmdline_checks(l: List, arch: str) -> None:
+def add_cmdline_checks(l: List
[ChecklistObjType]
, arch: str) -> None:
assert(arch), 'empty arch'
# Calling the CmdlineCheck class constructor:
assert(arch), 'empty arch'
# Calling the CmdlineCheck class constructor:
@@
-658,7
+658,7
@@
def normalize_cmdline_options(option: str, value: str) -> str:
# kernel.warn_limit (think about a proper value)
# net.ipv4.tcp_syncookies=1 (?)
# kernel.warn_limit (think about a proper value)
# net.ipv4.tcp_syncookies=1 (?)
-def add_sysctl_checks(l: List, _arch: StrOrNone) -> None:
+def add_sysctl_checks(l: List
[ChecklistObjType]
, _arch: StrOrNone) -> None:
# This function may be called with arch=None
# Calling the SysctlCheck class constructor:
# This function may be called with arch=None
# Calling the SysctlCheck class constructor: