From: Alexander Popov <alex.popov@linux.com>
Date: Fri, 6 May 2022 15:28:44 +0000 (+0300)
Subject: Add the KGDB check
X-Git-Tag: v0.6.1~164
X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=dfad55c47c63675b453fa02c571781a2486220a4;hp=f305cc9c1e5d9751313c9090cf1d85f80621f1f2;p=kconfig-hardened-check.git

Add the KGDB check

Thanks to @izh1979 for the idea.
---

diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py
index 27cbd21..52f505d 100644
--- a/kconfig_hardened_check/__init__.py
+++ b/kconfig_hardened_check/__init__.py
@@ -631,6 +631,7 @@ def add_kconfig_checks(l, arch):
     l += [KconfigCheck('cut_attack_surface', 'my', 'FTRACE', 'is not set')] # refers to LOCKDOWN
     l += [KconfigCheck('cut_attack_surface', 'my', 'VIDEO_VIVID', 'is not set')]
     l += [KconfigCheck('cut_attack_surface', 'my', 'INPUT_EVBUG', 'is not set')] # Can be used as a keylogger
+    l += [KconfigCheck('cut_attack_surface', 'my', 'KGDB', 'is not set')]
 
     # 'harden_userspace'
     if arch in ('X86_64', 'ARM64', 'X86_32'):