projects
/
kconfig-hardened-check.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
cb07285
)
Add MODULE_SIG_SHA3_512 as a valid option
author
Alexander Popov
<alex.popov@linux.com>
Mon, 19 Feb 2024 12:25:09 +0000
(15:25 +0300)
committer
Alexander Popov
<alex.popov@linux.com>
Mon, 19 Feb 2024 12:25:59 +0000
(15:25 +0300)
Refers to #107
kernel_hardening_checker/checks.py
patch
|
blob
|
history
diff --git
a/kernel_hardening_checker/checks.py
b/kernel_hardening_checker/checks.py
index a0a89e1c377a6dd7865bdc8b61d47cc5130cb9ed..635f0c1b0868976d7d98100f393e47a92e8fec8d 100644
(file)
--- a/
kernel_hardening_checker/checks.py
+++ b/
kernel_hardening_checker/checks.py
@@
-163,6
+163,7
@@
def add_kconfig_checks(l, arch):
l += [OR(KconfigCheck('self_protection', 'kspp', 'MODULE_SIG_ALL', 'y'),
modules_not_set)]
l += [OR(KconfigCheck('self_protection', 'kspp', 'MODULE_SIG_SHA512', 'y'),
+ KconfigCheck('self_protection', 'my', 'MODULE_SIG_SHA3_512', 'y'),
modules_not_set)]
l += [OR(KconfigCheck('self_protection', 'kspp', 'MODULE_SIG_FORCE', 'y'),
modules_not_set)] # refers to LOCKDOWN