X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=README.md;h=d8a43a6d09bf38e2b4ef3cf5bdcb4f37ea5c825a;hb=7af4586067f8f0aa8b4be095d4d0e108265c17a9;hp=8ffaeb14344a3df0829730e7da86a4f85176d753;hpb=0542f2657d9f282f6d0d3c9fc38c6847c93f7e23;p=kconfig-hardened-check.git diff --git a/README.md b/README.md index 8ffaeb1..d8a43a6 100644 --- a/README.md +++ b/README.md @@ -176,8 +176,18 @@ CONFIG_ARCH_MMAP_RND_BITS | 32 | clipos |userspace_prot [+] config check is finished: 'OK' - 50 / 'FAIL' - 70 ``` +## kconfig-hardened-check versioning -### Questions and answers +I usually update the kernel hardening recommendations after each Linux kernel release. + +So the version of `kconfig-hardened-check` is associated with the corresponding version of the kernel. + +The version format is: __[major_number].[kernel_version]__ + +The current version of `kconfig-hardened-check` is __0.5.2__, it's marked with the git tag. + + +## Questions and answers __Q:__ How disabling `CONFIG_USER_NS` cuts the attack surface? It's needed for containers!