X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=README.md;h=95cd7013b712d7924db0a2aaf3dae16402e1edbe;hb=478e5f266df05b5f75badef59914c8b0e71e3e0e;hp=62af0905a6010ebe6ea77a1dc20f44965720d3aa;hpb=0d7325e1da6a303918a51b99595ede6b2f2ab73f;p=kconfig-hardened-check.git diff --git a/README.md b/README.md index 62af090..95cd701 100644 --- a/README.md +++ b/README.md @@ -43,7 +43,6 @@ optional arguments: CONFIG_RETPOLINE | y | ubuntu18 | self_protection || OK CONFIG_X86_64 | y | ubuntu18 | self_protection || OK CONFIG_STRICT_KERNEL_RWX | y | ubuntu18 | self_protection || OK - CONFIG_STRICT_MODULE_RWX | y | ubuntu18 | self_protection || OK CONFIG_DEBUG_WX | y | ubuntu18 | self_protection || OK CONFIG_RANDOMIZE_BASE | y | ubuntu18 | self_protection || OK CONFIG_RANDOMIZE_MEMORY | y | ubuntu18 | self_protection || OK @@ -56,6 +55,7 @@ optional arguments: CONFIG_SLAB_FREELIST_RANDOM | y | ubuntu18 | self_protection || OK CONFIG_HARDENED_USERCOPY | y | ubuntu18 | self_protection || OK CONFIG_FORTIFY_SOURCE | y | ubuntu18 | self_protection || OK + CONFIG_STRICT_MODULE_RWX | y | ubuntu18 | self_protection || OK CONFIG_MODULE_SIG | y | ubuntu18 | self_protection || OK CONFIG_MODULE_SIG_ALL | y | ubuntu18 | self_protection || OK CONFIG_MODULE_SIG_SHA512 | y | ubuntu18 | self_protection || OK @@ -134,6 +134,12 @@ optional arguments: [-] config check is NOT PASSED: 51 errors ``` + +N.B. If `CONFIG_GCC_PLUGIN*` options are automatically disabled during your kernel compilation, +that means that your gcc doesn't support plugins. For example, if you have `gcc-7` on Ubuntu, +try to install `gcc-7-plugin-dev` package, it should help. + + __Go and fix them all!__ [1]: http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings