From: Alexander Popov Date: Tue, 17 Oct 2023 05:35:00 +0000 (+0300) Subject: hardened_usercopy=1 is now officially recommended by KSPP X-Git-Tag: v0.6.6~65 X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=528b57c61f4b7e1d7ce9a3c5922383b8dae093ff;p=kconfig-hardened-check.git hardened_usercopy=1 is now officially recommended by KSPP --- diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py index a05b07f..2d9f8c9 100644 --- a/kernel_hardening_checker/checks.py +++ b/kernel_hardening_checker/checks.py @@ -475,7 +475,6 @@ def add_cmdline_checks(l, arch): AND(CmdlineCheck('self_protection', 'kspp', 'page_poison', '1'), KconfigCheck('self_protection', 'kspp', 'PAGE_POISONING_ZERO', 'y'), CmdlineCheck('self_protection', 'kspp', 'slub_debug', 'P')))] - # The cmdline checks compatible with the kconfig recommendations of the KSPP project... l += [OR(CmdlineCheck('self_protection', 'kspp', 'hardened_usercopy', '1'), AND(KconfigCheck('self_protection', 'kspp', 'HARDENED_USERCOPY', 'y'), CmdlineCheck('self_protection', 'kspp', 'hardened_usercopy', 'is not set')))]