X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=kconfig_hardened_check%2Fengine.py;h=e9140447c90bf697d9a18b41ef39bc32bb72ead2;hb=db71a9e236bfca77e717aa6c680cbed479a32ca7;hp=8a4ccb8519dbe76323d1feb3dc527201f9ac6127;hpb=d8aa12692026607864113b25b6f19501412d3d94;p=kconfig-hardened-check.git diff --git a/kconfig_hardened_check/engine.py b/kconfig_hardened_check/engine.py index 8a4ccb8..e914044 100644 --- a/kconfig_hardened_check/engine.py +++ b/kconfig_hardened_check/engine.py @@ -1,9 +1,7 @@ #!/usr/bin/python3 """ -This tool helps me to check Linux kernel options against -my security hardening preferences for X86_64, ARM64, X86_32, and ARM. -Let the computers do their job! +This tool is for checking the security hardening options of the Linux kernel. Author: Alexander Popov @@ -45,10 +43,6 @@ class OptCheck: self.state = None self.result = None - @property - def type(self): - return None - def check(self): # handle the 'is present' check if self.expected == 'is present': @@ -255,7 +249,7 @@ def populate_simple_opt_with_data(opt, data, data_type): assert(data_type in SIMPLE_OPTION_TYPES), \ f'invalid data type "{data_type}"' assert(data), \ - f'empty data' + 'empty data' if data_type != opt.type: return @@ -287,6 +281,14 @@ def populate_with_data(checklist, data, data_type): populate_opt_with_data(opt, data, data_type) +def override_expected_value(checklist, name, new_val): + for opt in checklist: + if opt.name == name: + assert(opt.type in ('kconfig', 'cmdline')), \ + f'overriding an expected value for "{opt.type}" checks is not supported yet' + opt.expected = new_val + + def perform_checks(checklist): for opt in checklist: opt.check()