X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=kernel_hardening_checker%2Fchecks.py;fp=kernel_hardening_checker%2Fchecks.py;h=a1fb941ea5dbd5c7710d245cafe02339095c6f31;hb=b7fd998a9cfa6c25fad3a530a15d5ac9a9bf8c83;hp=9093b9b014d89e41b583512b47bb2b2e5ec20795;hpb=b3a87aa907c18a01da1f3b570177f4cc1ca251b7;p=kconfig-hardened-check.git diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py index 9093b9b..a1fb941 100644 --- a/kernel_hardening_checker/checks.py +++ b/kernel_hardening_checker/checks.py @@ -667,7 +667,7 @@ def add_sysctl_checks(l, _arch): have_config_file = KconfigCheck('-', '-', 'LOCALVERSION', 'is present') l += [OR(SysctlCheck('self_protection', 'kspp', 'net.core.bpf_jit_harden', '2'), - AND(KconfigCheck('cut_attack_surface', 'kspp', 'BPF_JIT', 'is not set'), + AND(KconfigCheck('-', '-', 'BPF_JIT', 'is not set'), have_config_file))] l += [SysctlCheck('cut_attack_surface', 'kspp', 'kernel.dmesg_restrict', '1')]