From: Alexander Popov Date: Sat, 30 Dec 2023 20:44:34 +0000 (+0300) Subject: Fix the order in the vdso32 check (part II) X-Git-Tag: v0.6.6~18 X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;ds=sidebyside;h=847a31d7e71c2ae396168622a63f7c47c46bd065;p=kconfig-hardened-check.git Fix the order in the vdso32 check (part II) --- diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py index 50dea2b..9ff27f3 100644 --- a/kernel_hardening_checker/checks.py +++ b/kernel_hardening_checker/checks.py @@ -552,7 +552,7 @@ def add_cmdline_checks(l, arch): l += [OR(CmdlineCheck('cut_attack_surface', 'kspp', 'vdso32', '0'), CmdlineCheck('cut_attack_surface', 'my', 'vdso', '0'), CmdlineCheck('cut_attack_surface', 'my', 'vdso32', '1'), - CmdlineCheck('cut_attack_surface', 'my', 'vdso', '0'), + CmdlineCheck('cut_attack_surface', 'my', 'vdso', '1'), AND(KconfigCheck('cut_attack_surface', 'kspp', 'COMPAT_VDSO', 'is not set'), CmdlineCheck('cut_attack_surface', 'my', 'vdso32', 'is not set'), CmdlineCheck('cut_attack_surface', 'my', 'vdso', 'is not set')))] # the vdso and vdso32 parameters must not be 2