projects
/
kconfig-hardened-check.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
Merge branch 'from-flipthewho-1'
[kconfig-hardened-check.git]
/
kconfig_hardened_check
/ __init__.py
2023-09-17
Alexander Popov
Rename kconfig-hardened-check into kernel-hardening...
commit
|
commitdiff
2023-09-17
Alexander Popov
kconfig-hardened-check -> kernel-hardening-checker
commit
|
commitdiff
2023-08-27
Alexander Popov
Support separate sysctl checking (without kconfig)
commit
|
commitdiff
2023-08-14
Alexander Popov
Test an unexpected line in the sysctl file
commit
|
commitdiff
2023-08-14
Alexander Popov
Turn the warning about unexpected line in Kconfig file...
commit
|
commitdiff
2023-08-13
Alexander Popov
Add the / symbol to the sysctl parsing pattern
commit
|
commitdiff
2023-08-13
Alexander Popov
Report that --print and --generate can't be used together
commit
|
commitdiff
2023-08-13
Alexander Popov
Enable sysctl checking
commit
|
commitdiff
2023-07-16
Alexander Popov
Mute warnings in the JSON mode and improve wording
commit
|
commitdiff
2023-07-16
Alexander Popov
Implement parse_sysctl_file()
commit
|
commitdiff
2023-07-15
Alexander Popov
Emit WARNING for the cmdline options that exist multipl...
commit
|
commitdiff
2023-07-15
Alexander Popov
Precise the Kconfig parsing
commit
|
commitdiff
2023-07-12
Alexander Popov
Get rid of useless regular expressions in detect_compiler()
commit
|
commitdiff
2023-07-12
Alexander Popov
Precise the regular expressions in detect_arch() and...
commit
|
commitdiff
2023-07-12
Alexander Popov
Show error if some cmdline option exists multiple times
commit
|
commitdiff
2023-07-08
Alexander Popov
Add the basic infrastructure for checking sysctl
commit
|
commitdiff
2023-07-02
Alexander Popov
Print the microarchitecture in --generate mode
commit
|
commitdiff
2023-06-25
Alexander Popov
Add the info about /proc/cmdline to the usage help
commit
|
commitdiff
2023-06-12
Alexander Popov
Add a new feature --generate
commit
|
commitdiff
2023-06-12
Alexander Popov
Refactoring of the argument parsing
commit
|
commitdiff
2023-06-12
Alexander Popov
Improve the comments and README (part II)
commit
|
commitdiff
2023-06-12
Alexander Popov
Improve the comments and README
commit
|
commitdiff
2023-04-22
Alexander Popov
Make hackish refinement of the CONFIG_ARCH_MMAP_RND_BIT...
commit
|
commitdiff
2023-03-26
Alexander Popov
Inform about supporting *.gz kconfig files
commit
|
commitdiff
2023-03-26
Alexander Popov
Merge pull request #80 from nE0sIghT/feature/gzipped...
commit
|
commitdiff
2023-03-25
Yuri Konotopov
Added support for gzipped config (eg. /proc/config.gz)
80/head
commit
|
commitdiff
2023-03-24
Alexander Popov
Fix style
commit
|
commitdiff
2023-03-06
Alexander Popov
Drop a useless 'if'
commit
|
commitdiff
2023-03-05
Alexander Popov
Use similar f-strings for more cases
commit
|
commitdiff
2023-03-05
Alexander Popov
Compare with None explicitly
commit
|
commitdiff
2023-02-26
Alexander Popov
Improve the 'pylint disable' statements
commit
|
commitdiff
2023-02-26
Alexander Popov
Add docstrings for the modules
commit
|
commitdiff
2023-02-26
Alexander Popov
Split into Python modules
commit
|
commitdiff
2023-02-26
Alexander Popov
Fix pylint: Using open without explicitly specifying...
commit
|
commitdiff
2023-02-26
Alexander Popov
Fix pylint warning: formatting a regular string which...
commit
|
commitdiff
2023-02-26
Alexander Popov
Fix pylint warning: formatting a regular string which...
commit
|
commitdiff
2023-02-26
Alexander Popov
Fix pylint warning: formatting a regular string which...
commit
|
commitdiff
2023-02-26
Alexander Popov
Fix pylint warning: formatting a regular string which...
commit
|
commitdiff
2023-02-17
Alexander Popov
Improve the 'mitigations' check
commit
|
commitdiff
2023-02-16
Alexander Popov
Add more info about perf_event_paranoid
commit
|
commitdiff
2023-02-04
Alexander Popov
Return the AIO check
commit
|
commitdiff
2023-02-04
Alexander Popov
Add the NOUVEAU_LEGACY_CTX_SUPPORT check
commit
|
commitdiff
2023-02-04
Alexander Popov
Don't use the uninitialized 'parsed_cmdline_options...
commit
|
commitdiff
2023-01-22
Alexander Popov
Fix the 'decision' for the slub_merge check
commit
|
commitdiff
2023-01-22
Alexander Popov
Fix the pylint R1714 issues
commit
|
commitdiff
2023-01-21
Alexander Popov
Add the check for the 'kvm.nx_huge_pages' cmdline parameter
commit
|
commitdiff
2023-01-21
Alexander Popov
Add the check for the slub_merge cmdline parameter
commit
|
commitdiff
2023-01-21
Alexander Popov
Clean up the comments
commit
|
commitdiff
2023-01-21
Alexander Popov
Add the check for the iommu cmdline option
commit
|
commitdiff
2023-01-21
Alexander Popov
Include parsed_cmdline_options in the print_unknown_opt...
commit
|
commitdiff
2023-01-19
Alexander Popov
Merge branch 'from-o8opi-2'
commit
|
commitdiff
2023-01-15
Alexander Popov
Update the VMAP_STACK check: it is available for ARM
commit
|
commitdiff
2023-01-15
Alexander Popov
Fix the arch condition for the SCHED_CORE check (II)
commit
|
commitdiff
2023-01-14
Alexander Popov
Fix the IOMMU_DEFAULT_DMA_STRICT check: it is in defcon...
commit
|
commitdiff
2023-01-14
Alexander Popov
Add the COMPAT and X86_X32_ABI checks
commit
|
commitdiff
2023-01-14
Alexander Popov
Fix the WERROR check: it is in defconfig for X86_64...
commit
|
commitdiff
2023-01-14
Alexander Popov
Fix the DEBUG_WX check: it is in defconfig for X86_64...
commit
|
commitdiff
2022-12-16
Alexander Popov
Remove the AIO check
commit
|
commitdiff
2022-12-10
Alexander Popov
Remember about the nosmt sysfs control file
commit
|
commitdiff
2022-12-10
Alexander Popov
Drop the comment about mitigations of CPU vulnerabilities
commit
|
commitdiff
2022-12-10
Alexander Popov
Save the list of disabled mitigations of CPU vulnerabil...
commit
|
commitdiff
2022-12-10
Alexander Popov
Add the nospectre_bhb check
commit
|
commitdiff
2022-12-10
Alexander Popov
Add the kpti check
commit
|
commitdiff
2022-12-10
Alexander Popov
Compare against '0' in the 'is not off' check
commit
|
commitdiff
2022-12-10
Alexander Popov
Add the tsx check
commit
|
commitdiff
2022-12-10
Alexander Popov
Change the 'decision' of X86_INTEL_TSX_MODE_OFF check...
commit
|
commitdiff
2022-12-10
Alexander Popov
Add the nomte check
commit
|
commitdiff
2022-12-10
Alexander Popov
Add the nopauth check
commit
|
commitdiff
2022-12-10
Alexander Popov
Add the nobti check
commit
|
commitdiff
2022-12-09
Alexander Popov
Add the sysrq_always_enabled check
commit
|
commitdiff
2022-12-09
Alexander Popov
Add the ssbd check
commit
|
commitdiff
2022-12-08
Alexander Popov
Reorder some checks, no functional changes
commit
|
commitdiff
2022-11-17
Alexander Popov
Add the srbds check
commit
|
commitdiff
2022-11-17
Alexander Popov
Add the retbleed check
commit
|
commitdiff
2022-11-17
Alexander Popov
Add the mmio_stale_data check
commit
|
commitdiff
2022-11-17
Alexander Popov
Add the tsx_async_abort check
commit
|
commitdiff
2022-11-17
Alexander Popov
Add the mds check
commit
|
commitdiff
2022-11-17
Alexander Popov
Add the l1tf check
commit
|
commitdiff
2022-11-17
Alexander Popov
Add the spectre_v2_user check
commit
|
commitdiff
2022-11-17
Alexander Popov
Do refactoring in normalize_cmdline_options()
commit
|
commitdiff
2022-11-17
Alexander Popov
Add the spec_store_bypass_disable check
commit
|
commitdiff
2022-11-17
Alexander Popov
Add the spectre_v2 check
commit
|
commitdiff
2022-11-17
Alexander Popov
Introduce the 'is present' check instead of expected...
commit
|
commitdiff
2022-11-11
Alexander Popov
Add the 'mitigations' check
commit
|
commitdiff
2022-11-09
Alexander Popov
Add the nosmt check
commit
|
commitdiff
2022-11-09
Alexander Popov
Add a special 'desired val' -- 'is not off'
commit
|
commitdiff
2022-11-09
Alexander Popov
Improve the result descriptions
commit
|
commitdiff
2022-11-08
Alexander Popov
Add assertions to check arguments of the Class constructors
commit
|
commitdiff
2022-10-23
Alexander Popov
Add the ARM64_E0PD check
commit
|
commitdiff
2022-10-23
Alexander Popov
Fix the SCHED_CORE check: it's now available for ARM64...
commit
|
commitdiff
2022-10-23
Alexander Popov
Update the self-protection checks adopted by KSPP ...
commit
|
commitdiff
2022-10-22
Alexander Popov
Update the self-protection checks adopted by KSPP ...
commit
|
commitdiff
2022-10-22
Alexander Popov
Update the self-protection checks adopted by KSPP ...
commit
|
commitdiff
2022-10-13
Alexander Popov
Update the self-protection checks adopted by KSPP ...
commit
|
commitdiff
2022-10-13
Alexander Popov
Update the self-protection checks adopted by KSPP ...
commit
|
commitdiff
2022-10-13
Alexander Popov
Update the HW_RANDOM_TPM check
commit
|
commitdiff
2022-10-13
Alexander Popov
Update the UBSAN checks according to the KSPP recommend...
commit
|
commitdiff
2022-10-13
Alexander Popov
Update the security policy checks adopted by KSPP
commit
|
commitdiff
2022-10-09
Alexander Popov
Drop some of my security policy recommendations
commit
|
commitdiff
2022-10-09
Alexander Popov
Check SECURITY_SELINUX_DEVELOP (recommended by Clip OS)
commit
|
commitdiff
next