From: Alexander Popov Date: Sat, 16 Dec 2023 21:21:10 +0000 (+0300) Subject: Add the CONFIG_LIST_HARDENED check X-Git-Tag: v0.6.6~35 X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=c0b1e259c617795b72245a7a3189282944006d43;p=kconfig-hardened-check.git Add the CONFIG_LIST_HARDENED check --- diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py index 5943e53..48f256c 100644 --- a/kernel_hardening_checker/checks.py +++ b/kernel_hardening_checker/checks.py @@ -229,6 +229,9 @@ def add_kconfig_checks(l, arch): # 'self_protection', 'clipos' l += [KconfigCheck('self_protection', 'clipos', 'SLAB_MERGE_DEFAULT', 'is not set')] + # 'self_protection', 'my' + l += [KconfigCheck('self_protection', 'my', 'LIST_HARDENED', 'y')] + # 'security_policy' if arch in ('X86_64', 'ARM64', 'X86_32'): l += [KconfigCheck('security_policy', 'defconfig', 'SECURITY', 'y')]