X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=kconfig_hardened_check%2F__init__.py;h=b59835780700638105666f0db365c2af7d2373db;hb=db71a9e236bfca77e717aa6c680cbed479a32ca7;hp=cdb08288fa0f3ccf2b938cf88fb92462070da61f;hpb=9bbea5b5bad45aac84aadf83536e31f9bd5e395e;p=kconfig-hardened-check.git diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py index cdb0828..b598357 100644 --- a/kconfig_hardened_check/__init__.py +++ b/kconfig_hardened_check/__init__.py @@ -1,9 +1,7 @@ #!/usr/bin/python3 """ -This tool helps me to check Linux kernel options against -my security hardening preferences for X86_64, ARM64, X86_32, and ARM. -Let the computers do their job! +This tool is for checking the security hardening options of the Linux kernel. Author: Alexander Popov @@ -42,9 +40,9 @@ def detect_arch(fname, archs): if arch is None: arch = option else: - return None, 'more than one supported architecture is detected' + return None, 'more than one supported microarchitecture is detected' if arch is None: - return None, 'failed to detect architecture' + return None, 'failed to detect microarchitecture' return arch, 'OK' @@ -211,11 +209,11 @@ def main(): description='A tool for checking the security hardening options of the Linux kernel') parser.add_argument('--version', action='version', version='%(prog)s ' + __version__) parser.add_argument('-p', '--print', choices=supported_archs, - help='print security hardening preferences for the selected architecture') + help='print the security hardening recommendations for the selected microarchitecture') parser.add_argument('-c', '--config', - help='check the kernel kconfig file against these preferences (also supports *.gz files)') + help='check the security hardening options in the kernel kconfig file (also supports *.gz files)') parser.add_argument('-l', '--cmdline', - help='check the kernel cmdline file against these preferences') + help='check the security hardening options in the kernel cmdline file') parser.add_argument('-m', '--mode', choices=report_modes, help='choose the report mode') args = parser.parse_args() @@ -241,7 +239,7 @@ def main(): if arch is None: sys.exit(f'[!] ERROR: {msg}') if mode != 'json': - print(f'[+] Detected architecture: {arch}') + print(f'[+] Detected microarchitecture: {arch}') kernel_version, msg = detect_kernel_version(args.config) if kernel_version is None: @@ -306,7 +304,7 @@ def main(): add_kconfig_checks(config_checklist, arch) add_cmdline_checks(config_checklist, arch) if mode != 'json': - print(f'[+] Printing kernel security hardening preferences for {arch}...') + print(f'[+] Printing kernel security hardening options for {arch}...') print_checklist(mode, config_checklist, False) sys.exit(0)