X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=kconfig_hardened_check%2F__init__.py;h=0f3f3d3fe1d15659cd5694884edcc70f66024a13;hb=bdac2c22b96b3a682801674efed92fddc8a347b0;hp=5bf50c856fcba2a4c0ea5bc296764232b6cee8a6;hpb=97325e595e3d38b84d6f973d2e216931083d8fcf;p=kconfig-hardened-check.git diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py index 5bf50c8..0f3f3d3 100755 --- a/kconfig_hardened_check/__init__.py +++ b/kconfig_hardened_check/__init__.py @@ -130,6 +130,26 @@ class VerCheck: print('| {}'.format(self.result), end='') +class PresenceCheck: + def __init__(self, name): + self.name = name + self.state = None + self.result = None + + def check(self): + if self.state is None: + self.result = 'FAIL: not present' + return False, self.result + else: + self.result = 'OK: is present' + return True, self.result + + def table_print(self, with_results): + print('CONFIG_{:<84}'.format(self.name + ' is present'), end='') + if with_results: + print('| {}'.format(self.result), end='') + + class ComplexOptCheck: def __init__(self, *opts): self.opts = opts @@ -165,7 +185,9 @@ class ComplexOptCheck: o.table_print(with_results) else: o = self.opts[0] - o.table_print(with_results) + o.table_print(False) + if with_results: + print('| {}'.format(self.result), end='') class OR(ComplexOptCheck): @@ -456,7 +478,7 @@ def construct_checklist(checklist, arch): checklist.append(OptCheck('X86_MSR', 'is not set', 'clipos', 'cut_attack_surface')) # refers to LOCKDOWN checklist.append(OptCheck('X86_CPUID', 'is not set', 'clipos', 'cut_attack_surface')) checklist.append(AND(OptCheck('LDISC_AUTOLOAD', 'is not set', 'clipos', 'cut_attack_surface'), \ - VerCheck((5, 1)))) # LDISC_AUTOLOAD can be disabled since v5.1 + PresenceCheck('LDISC_AUTOLOAD'))) checklist.append(OptCheck('AIO', 'is not set', 'grapheneos', 'cut_attack_surface'))