From: Julien Voisin Date: Sun, 19 May 2024 19:17:19 +0000 (+0000) Subject: Merge branch 'master' into scs_pac X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=f6075e933d9ec15d4b0bc216f764acbdfb51235d;hp=35f7574150940bc88eb3192f64c2dbfc650cf3e3;p=kconfig-hardened-check.git Merge branch 'master' into scs_pac --- diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py index f2e4c34..672ea7e 100644 --- a/kernel_hardening_checker/checks.py +++ b/kernel_hardening_checker/checks.py @@ -242,6 +242,7 @@ def add_kconfig_checks(l: List[ChecklistObjType], arch: str) -> None: if arch == 'ARM64': l += [KconfigCheck('self_protection', 'kspp', 'ARM64_SW_TTBR0_PAN', 'y')] l += [KconfigCheck('self_protection', 'kspp', 'SHADOW_CALL_STACK', 'y')] + l += [KconfigCheck('self_protection', 'kspp', 'UNWIND_PATCH_PAC_INTO_SCS', 'y')] l += [KconfigCheck('self_protection', 'kspp', 'KASAN_HW_TAGS', 'y')] # see also: kasan=on, kasan.stacktrace=off, kasan.fault=panic if arch == 'X86_32': l += [KconfigCheck('self_protection', 'kspp', 'PAGE_TABLE_ISOLATION', 'y')]