From: Alexander Popov Date: Thu, 28 Nov 2019 17:24:55 +0000 (+0300) Subject: Improve the list of the kernel parameters in TODO X-Git-Tag: v0.5.3~8 X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=ecc71d7ae86358a769eac116b180ed66536799ab;p=kconfig-hardened-check.git Improve the list of the kernel parameters in TODO --- diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py index 90e61e7..733106c 100755 --- a/kconfig-hardened-check.py +++ b/kconfig-hardened-check.py @@ -14,9 +14,10 @@ # page_poison=1 # slub_debug=FZP # slab_nomerge -# pti=on # kernel.kptr_restrict=1 -# lockdown=1 +# lockdown=1 (is it changed?) +# page_alloc.shuffle=1 +# iommu=force (does it help against DMA attacks?) # # Mitigations of CPU vulnerabilities: # Аrch-independent: