X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=README.md;h=e73ebff6a3216bfce4c83f7bd465d211d5c4c698;hb=6b72b6c171069049ad87d7d424c65703820dda4b;hp=60efeb7e33cad7eca74c21f68f080d7fa1ec8648;hpb=4707be6ded9016f349bab9d5dec266c4b15776a1;p=kconfig-hardened-check.git diff --git a/README.md b/README.md index 60efeb7..e73ebff 100644 --- a/README.md +++ b/README.md @@ -28,8 +28,8 @@ Please don't cry if my Python code looks like C. I'm just a kernel developer. ### Usage ``` -#usage: kconfig-hardened-check.py [-h] [-p {X86_64,X86_32,ARM64,ARM}] - [-c CONFIG] [--debug] +usage: kconfig-hardened-check.py [-h] [-p {X86_64,X86_32,ARM64,ARM}] + [-c CONFIG] [--debug] [--json] Checks the hardening options in the Linux kernel config @@ -40,6 +40,7 @@ optional arguments: -c CONFIG, --config CONFIG check the config_file against these preferences --debug enable internal debug mode + --json print results in JSON format ``` @@ -100,7 +101,6 @@ CONFIG_STACKLEAK_METRICS | is not set | clipos | self_protect CONFIG_STACKLEAK_RUNTIME_DISABLE | is not set | clipos | self_protection ||FAIL: CONFIG_GCC_PLUGIN_STACKLEAK is needed CONFIG_RANDOM_TRUST_CPU | is not set | clipos | self_protection || OK: not found CONFIG_MICROCODE | y | clipos | self_protection || OK -CONFIG_X86_MSR | y | clipos | self_protection || FAIL: "m" CONFIG_IOMMU_SUPPORT | y | clipos | self_protection || OK CONFIG_INTEL_IOMMU | y | clipos | self_protection || OK CONFIG_INTEL_IOMMU_SVM | y | clipos | self_protection || OK @@ -164,6 +164,7 @@ CONFIG_X86_VSYSCALL_EMULATION | is not set | clipos | cut_attack_su CONFIG_MAGIC_SYSRQ | is not set | clipos | cut_attack_surface || FAIL: "y" CONFIG_KEXEC_FILE | is not set | clipos | cut_attack_surface || FAIL: "y" CONFIG_USER_NS | is not set | clipos | cut_attack_surface || FAIL: "y" +CONFIG_LDISC_AUTOLOAD | is not set | clipos | cut_attack_surface || OK: not found CONFIG_MMIOTRACE | is not set | my | cut_attack_surface || FAIL: "y" CONFIG_LIVEPATCH | is not set | my | cut_attack_surface || FAIL: "y" CONFIG_IP_DCCP | is not set | my | cut_attack_surface || FAIL: "m" @@ -172,7 +173,7 @@ CONFIG_FTRACE | is not set | my | cut_attack_su CONFIG_BPF_JIT | is not set | my | cut_attack_surface || FAIL: "y" CONFIG_ARCH_MMAP_RND_BITS | 32 | clipos |userspace_protection|| FAIL: "28" -[+] config check is finished: 'OK' - 49 / 'FAIL' - 71 +[+] config check is finished: 'OK' - 50 / 'FAIL' - 70 ```