[![functional test coverage](https://codecov.io/gh/a13xp0p0v/kernel-hardening-checker/graph/badge.svg?flag=functional_test)](https://app.codecov.io/gh/a13xp0p0v/kernel-hardening-checker?flags%5B0%5D=functional_test)<br />
[![engine unit-test](https://github.com/a13xp0p0v/kernel-hardening-checker/workflows/engine%20unit-test/badge.svg)](https://github.com/a13xp0p0v/kernel-hardening-checker/actions/workflows/engine_unit-test.yml)
[![unit-test coverage](https://codecov.io/gh/a13xp0p0v/kernel-hardening-checker/graph/badge.svg?flag=engine_unit-test)](https://app.codecov.io/gh/a13xp0p0v/kernel-hardening-checker?flags%5B0%5D=engine_unit-test)<br />
+[![License: GPL v3](https://img.shields.io/badge/License-GPLv3-blue.svg)](https://www.gnu.org/licenses/gpl-3.0)
[![GitHub tag (latest by date)](https://img.shields.io/github/v/tag/a13xp0p0v/kernel-hardening-checker?label=release)](https://github.com/a13xp0p0v/kernel-hardening-checker/tags)
## Motivation
But nobody likes checking configs manually. So let the computers do their job!
-__kernel-hardening-checker__ (formerly __kconfig-hardened-check__) is a tool for checking the security hardening options of the Linux kernel. It supports checking:
+__kernel-hardening-checker__ (formerly __kconfig-hardened-check__) is a tool for checking the security hardening options of the Linux kernel. License: GPL-3.0.
+
+The tool supports checking:
- Kconfig options (compile-time)
- Kernel cmdline arguments (boot-time)
#!/usr/bin/env python3
-# For using the tool without installation via setuptools
+"""
+This tool is for checking the security hardening options of the Linux kernel.
+
+SPDX-FileCopyrightText: Alexander Popov <alex.popov@linux.com>
+SPDX-License-Identifier: GPL-3.0-only
+
+This file is for using the tool without installation via setuptools.
+"""
import os
import sys
"""
This tool is for checking the security hardening options of the Linux kernel.
-Author: Alexander Popov <alex.popov@linux.com>
+SPDX-FileCopyrightText: Alexander Popov <alex.popov@linux.com>
+SPDX-License-Identifier: GPL-3.0-only
This module performs input/output.
"""
"""
This tool is for checking the security hardening options of the Linux kernel.
-Author: Alexander Popov <alex.popov@linux.com>
+SPDX-FileCopyrightText: Alexander Popov <alex.popov@linux.com>
+SPDX-License-Identifier: GPL-3.0-only
This module contains knowledge for checks.
"""
"""
This tool is for checking the security hardening options of the Linux kernel.
-Author: Alexander Popov <alex.popov@linux.com>
+SPDX-FileCopyrightText: Alexander Popov <alex.popov@linux.com>
+SPDX-License-Identifier: GPL-3.0-only
This module is the engine of checks.
"""
"""
This tool is for checking the security hardening options of the Linux kernel.
-Author: Alexander Popov <alex.popov@linux.com>
+SPDX-FileCopyrightText: Alexander Popov <alex.popov@linux.com>
+SPDX-License-Identifier: GPL-3.0-only
This module performs unit-testing of the kernel-hardening-checker engine.
"""
"""
This tool is for checking the security hardening options of the Linux kernel.
-Author: Alexander Popov <alex.popov@linux.com>
+SPDX-FileCopyrightText: Alexander Popov <alex.popov@linux.com>
+SPDX-License-Identifier: GPL-3.0-only
This module performs installing of the kernel-hardening-checker package.
"""