summary |
shortlog |
log |
commit | commitdiff |
tree
raw |
patch |
inline | side by side (from parent 1:
21170ca)
Thanks to @izh1979 for the idea
# 'cut_attack_surface', 'my'
l += [CmdlineCheck('cut_attack_surface', 'my', 'sysrq_always_enabled', 'is not set')]
# 'cut_attack_surface', 'my'
l += [CmdlineCheck('cut_attack_surface', 'my', 'sysrq_always_enabled', 'is not set')]
+ # 'harden_userspace'
+ l += [CmdlineCheck('harden_userspace', 'defconfig', 'norandmaps', 'is not set')]
+
no_kstrtobool_options = [
'debugfs', # See debugfs_kernel() in fs/debugfs/inode.c
no_kstrtobool_options = [
'debugfs', # See debugfs_kernel() in fs/debugfs/inode.c