X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=README.md;h=e73ebff6a3216bfce4c83f7bd465d211d5c4c698;hb=refs%2Fpull%2F22%2Fhead;hp=3f661fd4cbc95d1d4e30163db068195328a56713;hpb=76f37eeca5b5d9d9c8801e588abe2951a5aabc99;p=kconfig-hardened-check.git diff --git a/README.md b/README.md index 3f661fd..e73ebff 100644 --- a/README.md +++ b/README.md @@ -28,8 +28,8 @@ Please don't cry if my Python code looks like C. I'm just a kernel developer. ### Usage ``` -#usage: kconfig-hardened-check.py [-h] [-p {X86_64,X86_32,ARM64,ARM}] - [-c CONFIG] [--debug] +usage: kconfig-hardened-check.py [-h] [-p {X86_64,X86_32,ARM64,ARM}] + [-c CONFIG] [--debug] [--json] Checks the hardening options in the Linux kernel config @@ -40,6 +40,7 @@ optional arguments: -c CONFIG, --config CONFIG check the config_file against these preferences --debug enable internal debug mode + --json print results in JSON format ``` @@ -100,7 +101,6 @@ CONFIG_STACKLEAK_METRICS | is not set | clipos | self_protect CONFIG_STACKLEAK_RUNTIME_DISABLE | is not set | clipos | self_protection ||FAIL: CONFIG_GCC_PLUGIN_STACKLEAK is needed CONFIG_RANDOM_TRUST_CPU | is not set | clipos | self_protection || OK: not found CONFIG_MICROCODE | y | clipos | self_protection || OK -CONFIG_X86_MSR | y | clipos | self_protection || FAIL: "m" CONFIG_IOMMU_SUPPORT | y | clipos | self_protection || OK CONFIG_INTEL_IOMMU | y | clipos | self_protection || OK CONFIG_INTEL_IOMMU_SVM | y | clipos | self_protection || OK @@ -173,7 +173,7 @@ CONFIG_FTRACE | is not set | my | cut_attack_su CONFIG_BPF_JIT | is not set | my | cut_attack_surface || FAIL: "y" CONFIG_ARCH_MMAP_RND_BITS | 32 | clipos |userspace_protection|| FAIL: "28" -[+] config check is finished: 'OK' - 50 / 'FAIL' - 71 +[+] config check is finished: 'OK' - 50 / 'FAIL' - 70 ```