From: Alexander Popov <alex.popov@linux.com>
Date: Sat, 9 Dec 2023 19:06:13 +0000 (+0300)
Subject: Add the SPECULATION_MITIGATIONS check
X-Git-Tag: v0.6.6~38
X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;ds=sidebyside;h=6ab3c1c8399ce96a0a18152fe895cc6be4fb859e;p=kconfig-hardened-check.git

Add the SPECULATION_MITIGATIONS check
---

diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py
index 715c278..748ba22 100644
--- a/kernel_hardening_checker/checks.py
+++ b/kernel_hardening_checker/checks.py
@@ -58,6 +58,7 @@ def add_kconfig_checks(l, arch):
     if arch in ('X86_64', 'ARM64', 'ARM'):
         l += [KconfigCheck('self_protection', 'defconfig', 'VMAP_STACK', 'y')]
     if arch in ('X86_64', 'X86_32'):
+        l += [KconfigCheck('self_protection', 'defconfig', 'SPECULATION_MITIGATIONS', 'y')]
         l += [KconfigCheck('self_protection', 'defconfig', 'DEBUG_WX', 'y')]
         l += [KconfigCheck('self_protection', 'defconfig', 'WERROR', 'y')]
         l += [KconfigCheck('self_protection', 'defconfig', 'X86_MCE', 'y')]