projects
/
kconfig-hardened-check.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
f4f3414
)
Add CONFIG_INTEGRITY for userspace hardening
author
Alexander Popov
<alex.popov@linux.com>
Sun, 8 Mar 2020 21:47:18 +0000
(
00:47
+0300)
committer
Alexander Popov
<alex.popov@linux.com>
Sun, 8 Mar 2020 21:47:18 +0000
(
00:47
+0300)
kconfig-hardened-check.py
patch
|
blob
|
history
diff --git
a/kconfig-hardened-check.py
b/kconfig-hardened-check.py
index 55e46a34f05a4922c7084b0e71a5256c1fd43775..dd7b30e486a5ee7f6447e0a42100495c99c73d5c 100755
(executable)
--- a/
kconfig-hardened-check.py
+++ b/
kconfig-hardened-check.py
@@
-434,6
+434,7
@@
def construct_checklist(checklist, arch):
if arch == 'X86_32':
checklist.append(OptCheck('MODIFY_LDT_SYSCALL', 'is not set', 'my', 'cut_attack_surface'))
+ checklist.append(OptCheck('INTEGRITY', 'y', 'defconfig', 'userspace_hardening'))
if arch == 'ARM64':
checklist.append(OptCheck('ARM64_PTR_AUTH', 'y', 'defconfig', 'userspace_hardening'))
if arch == 'X86_64' or arch == 'ARM64':