projects
/
kconfig-hardened-check.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
|
inline
| side by side (parent:
0341dca
)
Update the `decision` for the SLAB_MERGE_DEFAULT check
author
Alexander Popov
<alex.popov@linux.com>
Wed, 3 Jul 2024 13:41:22 +0000
(16:41 +0300)
committer
Alexander Popov
<alex.popov@linux.com>
Wed, 3 Jul 2024 13:41:22 +0000
(16:41 +0300)
kernel_hardening_checker/checks.py
patch
|
blob
|
history
diff --git
a/kernel_hardening_checker/checks.py
b/kernel_hardening_checker/checks.py
index b33e3d919513d127690454d8c43bdf59919d319b..be2689e0ad1554a5d6a2d8246f87ec72b5de7d94 100755
(executable)
--- a/
kernel_hardening_checker/checks.py
+++ b/
kernel_hardening_checker/checks.py
@@
-535,7
+535,7
@@
def add_cmdline_checks(l: List[ChecklistObjType], arch: str) -> None:
l += [CmdlineCheck('self_protection', 'kspp', 'page_alloc.shuffle', '1')]
l += [CmdlineCheck('self_protection', 'kspp', 'cfi', 'kcfi')]
l += [OR(CmdlineCheck('self_protection', 'kspp', 'slab_nomerge', 'is present'),
l += [CmdlineCheck('self_protection', 'kspp', 'page_alloc.shuffle', '1')]
l += [CmdlineCheck('self_protection', 'kspp', 'cfi', 'kcfi')]
l += [OR(CmdlineCheck('self_protection', 'kspp', 'slab_nomerge', 'is present'),
- AND(KconfigCheck('self_protection', '
clipos
', 'SLAB_MERGE_DEFAULT', 'is not set'),
+ AND(KconfigCheck('self_protection', '
kspp
', 'SLAB_MERGE_DEFAULT', 'is not set'),
CmdlineCheck('self_protection', 'kspp', 'slab_merge', 'is not set'),
CmdlineCheck('self_protection', 'kspp', 'slub_merge', 'is not set')))]
l += [OR(CmdlineCheck('self_protection', 'kspp', 'init_on_alloc', '1'),
CmdlineCheck('self_protection', 'kspp', 'slab_merge', 'is not set'),
CmdlineCheck('self_protection', 'kspp', 'slub_merge', 'is not set')))]
l += [OR(CmdlineCheck('self_protection', 'kspp', 'init_on_alloc', '1'),