projects / kconfig-hardened-check.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f19835d) | patch
Drop the INTEGRITY check
authorAlexander Popov <alex.popov@linux.com>
Sun, 9 Apr 2023 23:48:08 +0000 (02:48 +0300)
committerAlexander Popov <alex.popov@linux.com>
Sun, 9 Apr 2023 23:48:08 +0000 (02:48 +0300)
commit4c2090a37363c166aef4fd1671680da80c14c7c1
treed894e8ef00fecd858b534a2f389418aedf76beeatree | snapshot (zip tar.gz)
parentf19835dbf0afafdb446567d950de3000f0c0c4adcommit | diff
Drop the INTEGRITY check

CONFIG_INTEGRITY is useless without enabling IMA/EVM.
We can't require enabling IMA/EVM because there are other
file system integrity mechanisms like DM_VERITY, FS_VERITY, etc.
So there is no reason to check CONFIG_INTEGRITY.

Refers to #75
kconfig_hardened_check/checks.py diff | blob | history
kconfig-hardened-check