X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=kconfig-hardened-check.py;h=cb59e39402ddb6d82edc5f4d6db39bc9e9197c59;hb=76f37eeca5b5d9d9c8801e588abe2951a5aabc99;hp=75f8cfd5bd85e5aa8bb0d32979429cd8cf226b38;hpb=4707be6ded9016f349bab9d5dec266c4b15776a1;p=kconfig-hardened-check.git

diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py
index 75f8cfd..cb59e39 100755
--- a/kconfig-hardened-check.py
+++ b/kconfig-hardened-check.py
@@ -353,6 +353,7 @@ def construct_checklist(arch):
     checklist.append(OptCheck('MAGIC_SYSRQ',              'is not set', 'clipos', 'cut_attack_surface'))
     checklist.append(OptCheck('KEXEC_FILE',               'is not set', 'clipos', 'cut_attack_surface')) # refers to LOCK_DOWN_KERNEL (permissive)
     checklist.append(OptCheck('USER_NS',                  'is not set', 'clipos', 'cut_attack_surface')) # user.max_user_namespaces=0
+    checklist.append(OptCheck('LDISC_AUTOLOAD',           'is not set', 'clipos', 'cut_attack_surface'))
 
     checklist.append(OptCheck('MMIOTRACE',            'is not set', 'my', 'cut_attack_surface')) # refers to LOCK_DOWN_KERNEL (permissive)
     checklist.append(OptCheck('LIVEPATCH',            'is not set', 'my', 'cut_attack_surface'))