From: Loïc <4661917+HacKurx@users.noreply.github.com>
Date: Wed, 18 Jul 2018 18:34:28 +0000 (+0200)
Subject: Add Grsecurity recommendation on BINFMT_AOUT
X-Git-Tag: v0.5.2~87^2~6
X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=55bd5ec62061d3c28d17576f3ebcc0630529c6af;p=kconfig-hardened-check.git

Add Grsecurity recommendation on BINFMT_AOUT

Linux historical interest is not secure ;)

Conflicts resolved by @a13xp0p0v
---

diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py
index ac2644f..30f3d17 100755
--- a/kconfig-hardened-check.py
+++ b/kconfig-hardened-check.py
@@ -112,6 +112,7 @@ def construct_opt_checks():
     checklist.append(OptCheck('ZSMALLOC_STAT',        'is not set', 'ubuntu18', 'cut_attack_surface'))
     checklist.append(OptCheck('PAGE_OWNER',           'is not set', 'ubuntu18', 'cut_attack_surface'))
     checklist.append(OptCheck('DEBUG_KMEMLEAK',       'is not set', 'ubuntu18', 'cut_attack_surface'))
+    checklist.append(OptCheck('BINFMT_AOUT',          'is not set', 'ubuntu18', 'cut_attack_surface'))
 
     checklist.append(OptCheck('IO_STRICT_DEVMEM',     'y', 'kspp', 'cut_attack_surface'))
     checklist.append(OptCheck('LEGACY_VSYSCALL_NONE', 'y', 'kspp', 'cut_attack_surface')) # 'vsyscall=none'