From: Alexander Popov <alex.popov@linux.com>
Date: Sat, 2 Dec 2023 17:46:14 +0000 (+0300)
Subject: Add the check for dis_ucode_ldr
X-Git-Tag: v0.6.6~42
X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=a740d952458f12525d9b5edecf8a3e35f5ed2650;p=kconfig-hardened-check.git

Add the check for dis_ucode_ldr

Thanks to @izh1979 for the idea
---

diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py
index 9fc92e5..5daf889 100644
--- a/kernel_hardening_checker/checks.py
+++ b/kernel_hardening_checker/checks.py
@@ -420,6 +420,7 @@ def add_cmdline_checks(l, arch):
     l += [CmdlineCheck('self_protection', 'defconfig', 'nospectre_v2', 'is not set')]
     l += [CmdlineCheck('self_protection', 'defconfig', 'nospectre_bhb', 'is not set')]
     l += [CmdlineCheck('self_protection', 'defconfig', 'nospec_store_bypass_disable', 'is not set')]
+    l += [CmdlineCheck('self_protection', 'defconfig', 'dis_ucode_ldr', 'is not set')]
     l += [CmdlineCheck('self_protection', 'defconfig', 'arm64.nobti', 'is not set')]
     l += [CmdlineCheck('self_protection', 'defconfig', 'arm64.nopauth', 'is not set')]
     l += [CmdlineCheck('self_protection', 'defconfig', 'arm64.nomte', 'is not set')]