X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=README.md;h=05973a22b1e27c85b54e233bb87fefe5afbf5beb;hb=cdbc8f0cd544afecbde3cd348e7b0091e144845d;hp=ac72965e792f69d99286b3faf8eba033740ab6aa;hpb=6d7703f40e1c3f7f6c9b664491602acd52d2b00d;p=kconfig-hardened-check.git diff --git a/README.md b/README.md index ac72965..05973a2 100644 --- a/README.md +++ b/README.md @@ -43,12 +43,10 @@ optional arguments: CONFIG_RETPOLINE | y | ubuntu18 | self_protection || OK CONFIG_X86_64 | y | ubuntu18 | self_protection || OK CONFIG_STRICT_KERNEL_RWX | y | ubuntu18 | self_protection || OK - CONFIG_STRICT_MODULE_RWX | y | ubuntu18 | self_protection || OK CONFIG_DEBUG_WX | y | ubuntu18 | self_protection || OK CONFIG_RANDOMIZE_BASE | y | ubuntu18 | self_protection || OK CONFIG_RANDOMIZE_MEMORY | y | ubuntu18 | self_protection || OK - CONFIG_CC_STACKPROTECTOR | y | ubuntu18 | self_protection || OK - CONFIG_CC_STACKPROTECTOR_STRONG | y | ubuntu18 | self_protection || OK + CONFIG_STACKPROTECTOR_STRONG | y | ubuntu18 | self_protection ||CONFIG_CC_STACKPROTECTOR_STRONG: OK ("y") CONFIG_VMAP_STACK | y | ubuntu18 | self_protection || OK CONFIG_THREAD_INFO_IN_TASK | y | ubuntu18 | self_protection || OK CONFIG_SCHED_STACK_END_CHECK | y | ubuntu18 | self_protection || OK @@ -57,6 +55,7 @@ optional arguments: CONFIG_SLAB_FREELIST_RANDOM | y | ubuntu18 | self_protection || OK CONFIG_HARDENED_USERCOPY | y | ubuntu18 | self_protection || OK CONFIG_FORTIFY_SOURCE | y | ubuntu18 | self_protection || OK + CONFIG_STRICT_MODULE_RWX | y | ubuntu18 | self_protection || OK CONFIG_MODULE_SIG | y | ubuntu18 | self_protection || OK CONFIG_MODULE_SIG_ALL | y | ubuntu18 | self_protection || OK CONFIG_MODULE_SIG_SHA512 | y | ubuntu18 | self_protection || OK @@ -131,9 +130,8 @@ optional arguments: CONFIG_BPF_JIT | is not set | my | cut_attack_surface || FAIL: "y" CONFIG_BPF_SYSCALL | is not set | my | cut_attack_surface || FAIL: "y" CONFIG_ARCH_MMAP_RND_BITS | 32 | my |userspace_protection|| FAIL: "28" - CONFIG_LKDTM | m | my | feature_test || FAIL: "is not set" -[-] config check is NOT PASSED: 52 errors +[-] config check is NOT PASSED: 51 errors ``` __Go and fix them all!__