From: Alexander Popov Date: Mon, 30 Jul 2018 14:06:04 +0000 (+0300) Subject: Add DEBUG_RODATA as old alternative to STRICT_KERNEL_RWX X-Git-Tag: v0.5.2~76 X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=f6fa3b3835e1ec6bb6ab2382653ed4eca6149209;p=kconfig-hardened-check.git Add DEBUG_RODATA as old alternative to STRICT_KERNEL_RWX --- diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py index ec03bf4..ff17721 100755 --- a/kconfig-hardened-check.py +++ b/kconfig-hardened-check.py @@ -103,7 +103,8 @@ def construct_checklist(): checklist.append(OptCheck('PAGE_TABLE_ISOLATION', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('RETPOLINE', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('X86_64', 'y', 'ubuntu18', 'self_protection')) - checklist.append(OptCheck('STRICT_KERNEL_RWX', 'y', 'ubuntu18', 'self_protection')) + checklist.append(OR(OptCheck('STRICT_KERNEL_RWX', 'y', 'ubuntu18', 'self_protection'), \ + OptCheck('DEBUG_RODATA', 'y', 'before_v4.11', 'self_protection'))) checklist.append(OptCheck('DEBUG_WX', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('RANDOMIZE_BASE', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('RANDOMIZE_MEMORY', 'y', 'ubuntu18', 'self_protection'))