From: Alexander Popov Date: Sun, 9 Oct 2022 12:49:13 +0000 (+0300) Subject: Check CONFIG_HW_RANDOM_TPM (recommended by Clip OS) X-Git-Tag: v0.6.1~78 X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=bd7e735d4b50542cc8137429d52da707c79e669a;p=kconfig-hardened-check.git Check CONFIG_HW_RANDOM_TPM (recommended by Clip OS) --- diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py index a13f0f8..9ae2474 100644 --- a/kconfig_hardened_check/__init__.py +++ b/kconfig_hardened_check/__init__.py @@ -484,6 +484,7 @@ def add_kconfig_checks(l, arch): l += [KconfigCheck('self_protection', 'clipos', 'SLAB_MERGE_DEFAULT', 'is not set')] l += [KconfigCheck('self_protection', 'clipos', 'RANDOM_TRUST_BOOTLOADER', 'is not set')] l += [KconfigCheck('self_protection', 'clipos', 'RANDOM_TRUST_CPU', 'is not set')] + l += [KconfigCheck('self_protection', 'clipos', 'CONFIG_HW_RANDOM_TPM', 'y')] l += [AND(KconfigCheck('self_protection', 'clipos', 'RANDSTRUCT_PERFORMANCE', 'is not set'), KconfigCheck('self_protection', 'clipos', 'GCC_PLUGIN_RANDSTRUCT_PERFORMANCE', 'is not set'), randstruct_is_set)]