Add the ARM_SMMU* kconfig checks for ARM

diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py
index eba75c7b916b7cfdd2f67210c9271f4f4f09b245..96da7bf8ddd007d80a17f55df47e7571c354bb68 100755 (executable)
--- a/kernel_hardening_checker/checks.py
+++ b/kernel_hardening_checker/checks.py
@@ -277,6 +277,11 @@ def add_kconfig_checks(l: List[ChecklistObjType], arch: str) -> None:
                  KconfigCheck('self_protection', 'kspp', 'DEBUG_WX', 'y'))]
                  # DEBUG_WX has been renamed to ARM_DEBUG_WX on ARM
 
+    # 'self_protection', 'a13xp0p0v'
+    if arch == 'ARM':
+        l += [KconfigCheck('self_protection', 'a13xp0p0v', 'ARM_SMMU', 'y')]
+        l += [KconfigCheck('self_protection', 'a13xp0p0v', 'ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT', 'y')]
+
     # 'security_policy'
     if arch in ('X86_64', 'ARM64', 'X86_32'):
         l += [KconfigCheck('security_policy', 'defconfig', 'SECURITY', 'y')]