From: Alexander Popov <alex.popov@linux.com>
Date: Sat, 14 Aug 2021 06:33:14 +0000 (+0300)
Subject: Add the command line parameters that should NOT be set
X-Git-Tag: v0.5.14~14
X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=2b5bf3548b6a7edbf7cd74278d570b658f9ab34a;p=kconfig-hardened-check.git

Add the command line parameters that should NOT be set
---

diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py
index e1b5a5e..e0f2e01 100644
--- a/kconfig_hardened_check/__init__.py
+++ b/kconfig_hardened_check/__init__.py
@@ -34,6 +34,11 @@
 #           kpti=on
 #           ssbd=force-on
 #
+#    Should NOT be set:
+#           nokaslr
+#           arm64.nobti
+#           arm64.nopauth
+#
 # N.B. Hardening sysctls:
 #    kernel.kptr_restrict=2 (or 1?)
 #    kernel.dmesg_restrict=1 (also see the kconfig option)