From: Alexander Popov Date: Fri, 22 Apr 2022 10:13:05 +0000 (+0300) Subject: Add the STACKPROTECTOR check from KSPP X-Git-Tag: v0.5.17~3 X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;ds=sidebyside;h=61bfef8931bcefc1abb6d3d46e169c8372ce729b;p=kconfig-hardened-check.git Add the STACKPROTECTOR check from KSPP Thanks to @izh1979 for the idea. --- diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py index 493d177..a40d8f2 100644 --- a/kconfig_hardened_check/__init__.py +++ b/kconfig_hardened_check/__init__.py @@ -326,6 +326,8 @@ def add_kconfig_checks(l, arch): l += [KconfigCheck('self_protection', 'defconfig', 'BUG', 'y')] l += [KconfigCheck('self_protection', 'defconfig', 'SLUB_DEBUG', 'y')] l += [KconfigCheck('self_protection', 'defconfig', 'GCC_PLUGINS', 'y')] + l += [OR(KconfigCheck('self_protection', 'defconfig', 'STACKPROTECTOR', 'y'), + KconfigCheck('self_protection', 'defconfig', 'CC_STACKPROTECTOR', 'y'))] l += [OR(KconfigCheck('self_protection', 'defconfig', 'STACKPROTECTOR_STRONG', 'y'), KconfigCheck('self_protection', 'defconfig', 'CC_STACKPROTECTOR_STRONG', 'y'))] l += [OR(KconfigCheck('self_protection', 'defconfig', 'STRICT_KERNEL_RWX', 'y'),