X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=kconfig-hardened-check.py;h=733106cb589bcac431d1084623e9c6b882175f83;hb=ecc71d7ae86358a769eac116b180ed66536799ab;hp=90e61e70056a81b9e8287bf176049eb7af86d789;hpb=4de80103b72ee3d7842b032c5513ab1aee5b6129;p=kconfig-hardened-check.git diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py index 90e61e7..733106c 100755 --- a/kconfig-hardened-check.py +++ b/kconfig-hardened-check.py @@ -14,9 +14,10 @@ # page_poison=1 # slub_debug=FZP # slab_nomerge -# pti=on # kernel.kptr_restrict=1 -# lockdown=1 +# lockdown=1 (is it changed?) +# page_alloc.shuffle=1 +# iommu=force (does it help against DMA attacks?) # # Mitigations of CPU vulnerabilities: # Аrch-independent: