From: Alexander Popov <alex.popov@linux.com>
Date: Sun, 28 May 2023 22:56:14 +0000 (+0300)
Subject: Add the X86_KERNEL_IBT check
X-Git-Tag: v0.6.6~152
X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=2588752f2803d58118f8d7b05ae16983cf588dc9;p=kconfig-hardened-check.git

Add the X86_KERNEL_IBT check

Now it's enabled by default for X86_64.
---

diff --git a/kconfig_hardened_check/checks.py b/kconfig_hardened_check/checks.py
index ab25afa..ba29e2d 100644
--- a/kconfig_hardened_check/checks.py
+++ b/kconfig_hardened_check/checks.py
@@ -116,6 +116,7 @@ def add_kconfig_checks(l, arch):
     if arch == 'X86_64':
         l += [KconfigCheck('self_protection', 'defconfig', 'PAGE_TABLE_ISOLATION', 'y')]
         l += [KconfigCheck('self_protection', 'defconfig', 'RANDOMIZE_MEMORY', 'y')]
+        l += [KconfigCheck('self_protection', 'defconfig', 'X86_KERNEL_IBT', 'y')]
         l += [AND(KconfigCheck('self_protection', 'defconfig', 'INTEL_IOMMU', 'y'),
                   iommu_support_is_set)]
         l += [AND(KconfigCheck('self_protection', 'defconfig', 'AMD_IOMMU', 'y'),