X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=kconfig_hardened_check%2F__init__.py;h=8bf79374824675c1649f6bb67a6eb716e95fc189;hb=e5e4b2a5111cf6fd82566ee3c89974a13cce74bb;hp=3b470443daf3c618e7cb019279381185f04cfaec;hpb=befa4a35117c0d1ff58e85b5c42a3a1b55b4ebaa;p=kconfig-hardened-check.git

diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py
index 3b47044..8bf7937 100644
--- a/kconfig_hardened_check/__init__.py
+++ b/kconfig_hardened_check/__init__.py
@@ -303,6 +303,7 @@ def construct_checklist(l, arch):
         l += [AND(OptCheck('self_protection', 'defconfig', 'AMD_IOMMU', 'y'),
                   iommu_support_is_set)]
     if arch == 'ARM64':
+        l += [OptCheck('self_protection', 'defconfig', 'ARM64_PAN', 'y')]
         l += [OptCheck('self_protection', 'defconfig', 'UNMAP_KERNEL_AT_EL0', 'y')]
         l += [OptCheck('self_protection', 'defconfig', 'HARDEN_EL2_VECTORS', 'y')]
         l += [OptCheck('self_protection', 'defconfig', 'RODATA_FULL_DEFAULT_ENABLED', 'y')]