projects
/
kconfig-hardened-check.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
Use the option type instead of calling hasattr()
[kconfig-hardened-check.git]
/
kconfig_hardened_check
/
2022-03-05
Alexander Popov
Use the option type instead of calling hasattr()
tree
|
commitdiff
2022-03-05
Alexander Popov
Merge branch 'refactoring'
tree
|
commitdiff
2022-02-14
Alexander Popov
Introduce the json_dump() class method
refactoring
tree
|
commitdiff
2022-02-14
Alexander Popov
Improve 'type' for ComplexOptCheck and PresenceCheck...
tree
|
commitdiff
2022-02-14
Alexander Popov
Make populate_with_data() aware of data type
tree
|
commitdiff
2022-02-14
Alexander Popov
Add 'type' for PresenceCheck and VersionCheck
tree
|
commitdiff
2022-02-14
Alexander Popov
Rename VerCheck to VersionCheck
tree
|
commitdiff
2022-02-14
Alexander Popov
Add more ComplexOptCheck validation
tree
|
commitdiff
2022-02-14
Alexander Popov
Improve print_unknown_options()
tree
|
commitdiff
2022-02-14
Alexander Popov
Remove 'CONFIG_' hardcoding
tree
|
commitdiff
2022-02-11
Alexander Popov
Merge branch 'refactoring'
tree
|
commitdiff
2022-02-11
Alexander Popov
Refactor the OR logic code
tree
|
commitdiff
2022-02-11
Alexander Popov
Rename config to kconfig where needed (part II)
tree
|
commitdiff
2022-01-22
Alexander Popov
Extract populate_with_data() from perform_checks()
tree
|
commitdiff
2022-01-22
Alexander Popov
Rename config to kconfig where needed
tree
|
commitdiff
2022-01-22
Alexander Popov
Print the type of a check in the json mode
tree
|
commitdiff
2022-01-22
Alexander Popov
ComplexOptCheck type has the type of the first opt...
tree
|
commitdiff
2022-01-21
Alexander Popov
Do more output tuning
tree
|
commitdiff
2022-01-21
Alexander Popov
Add check type
tree
|
commitdiff
2022-01-21
Alexander Popov
Print compactly
tree
|
commitdiff
2022-01-21
Alexander Popov
Introduce KconfigCheck class
tree
|
commitdiff
2022-01-21
Alexander Popov
Fix TRIM_UNUSED_KSYMS check
tree
|
commitdiff
2021-12-24
Alexander Popov
Add l1d_flush (for future reference)
tree
|
commitdiff
2021-12-05
Alexander Popov
Add ARM64_PTR_AUTH_KERNEL extracted from ARM64_PTR_AUTH
tree
|
commitdiff
2021-11-09
Alexander Popov
Keep the old X86_PTDUMP check as a backup
tree
|
commitdiff
2021-11-09
Alexander Popov
Simplify the check about PTDUMP_DEBUGFS (I was correct)
tree
|
commitdiff
2021-11-09
Alexander Popov
Add more checks from grsecurity for cutting attack...
tree
|
commitdiff
2021-11-09
Alexander Popov
Fix the 'decision' field of the IO_URING check
tree
|
commitdiff
2021-11-09
Alexander Popov
Add more checks from grsecurity for cutting attack...
tree
|
commitdiff
2021-11-09
Alexander Popov
Fix the 'decision' field of the KPROBES check
tree
|
commitdiff
2021-11-09
Alexander Popov
Add the comment
tree
|
commitdiff
2021-09-23
Alexander Popov
Update the README
v0.5.14
tree
|
commitdiff
2021-09-22
Alexander Popov
Move 'self_protection' & 'maintainer' higher
tree
|
commitdiff
2021-09-21
Alexander Popov
Add HARDENED_USERCOPY_PAGESPAN check from KSPP
tree
|
commitdiff
2021-09-21
Alexander Popov
Add comments about the maintainer recommendations
tree
|
commitdiff
2021-09-21
Alexander Popov
Fix UBSAN_BOUNDS recommendations
tree
|
commitdiff
2021-09-21
Alexander Popov
RANDOMIZE_KSTACK_OFFSET_DEFAULT is recommended by KSPP
tree
|
commitdiff
2021-09-16
Alexander Popov
Update the KSPP recommendations
tree
|
commitdiff
2021-09-16
Alexander Popov
Add defconfigs for Linux v5.14
tree
|
commitdiff
2021-09-10
Alexander Popov
Merge pull request #54 from evdenis/master
tree
|
commitdiff
2021-09-10
Denis Efremov
Add BLK_DEV_FD
54/head
tree
|
commitdiff
2021-09-10
Alexander Popov
Add RANDOMIZE_KSTACK_OFFSET_DEFAULT
tree
|
commitdiff
2021-08-29
Alexander Popov
Add CFI_CLANG
tree
|
commitdiff
2021-08-29
Alexander Popov
Add ARM64_EPAN
tree
|
commitdiff
2021-08-20
Alexander Popov
Merge pull request #51 from Hacks4Snacks/master
tree
|
commitdiff
2021-08-20
Mark D. Gray
Added Linux/x86_64 kernel config link for CBL-Mariner
51/head
tree
|
commitdiff
2021-08-19
Mark D. Gray
Added cbl-mariner kernel configuration file.
tree
|
commitdiff
2021-08-14
Alexander Popov
Add hardware tag-based KASAN with arm64 Memory Tagging...
tree
|
commitdiff
2021-08-14
Alexander Popov
Add the command line parameters that should NOT be set
tree
|
commitdiff
2021-08-08
Alexander Popov
Document the changes of vm.unprivileged_userfaultfd...
tree
|
commitdiff
2021-08-08
Alexander Popov
Add the news about PAGE_POISONING
tree
|
commitdiff
2021-07-02
Alexander Popov
Improve wording
tree
|
commitdiff
2021-06-19
Alexander Popov
Update the README.
v0.5.10
tree
|
commitdiff
2021-06-19
Alexander Popov
Fix pylint warning
tree
|
commitdiff
2021-06-19
Alexander Popov
Remember that SHADOW_CALL_STACK depends on clang
tree
|
commitdiff
2021-06-19
Alexander Popov
STACKPROTECTOR_PER_TASK is also available for ARM64
tree
|
commitdiff
2021-06-19
Alexander Popov
INTEL_IOMMU_SVM is available only for X86_64
tree
|
commitdiff
2021-06-19
Alexander Popov
Reorder arch checks
tree
|
commitdiff
2021-06-19
Alexander Popov
SECURITY_DMESG_RESTRICT is recommended by KSPP now
tree
|
commitdiff
2021-06-19
Alexander Popov
Think about kptr_restrict later (KSPP recommends to...
tree
|
commitdiff
2021-06-19
Alexander Popov
Mention that nosmt is slow
tree
|
commitdiff
2021-06-19
Alexander Popov
More info on init_on_free and init_on_alloc
tree
|
commitdiff
2021-06-19
Alexander Popov
SLUB_DEBUG_ON is very slow, leave it for the kernel...
tree
|
commitdiff
2021-06-19
Alexander Popov
Update KSPP recommendations
tree
|
commitdiff
2021-06-19
Alexander Popov
Add defconfigs for v5.10
tree
|
commitdiff
2021-06-19
Alexander Popov
HARDEN_BRANCH_PREDICTOR for ARM64 is enabled by default...
tree
|
commitdiff
2021-06-18
Alexander Popov
Add ARM64_MTE for userspace
tree
|
commitdiff
2021-06-18
Alexander Popov
Maybe SHADOW_CALL_STACK should be alternative to STACKP...
tree
|
commitdiff
2021-06-18
Alexander Popov
Save 'debugfs=no-mount' for future
tree
|
commitdiff
2020-10-30
Alexander Popov
Fix indentation (thanks to pylint)
tree
|
commitdiff
2020-10-23
Alexander Popov
INIT_STACK_ALL -> INIT_STACK_ALL_ZERO (was renamed)
tree
|
commitdiff
2020-10-23
Alexander Popov
Add SHADOW_CALL_STACK for ARM64
tree
|
commitdiff
2020-10-22
Alexander Popov
Add the recommendation about TRIM_UNUSED_KSYMS
tree
|
commitdiff
2020-10-22
Alexander Popov
Add ARM64_BTI_KERNEL
tree
|
commitdiff
2020-10-22
Alexander Popov
Add the recommendation about UBSAN_BOUNDS
tree
|
commitdiff
2020-10-22
Alexander Popov
PAGE_POISONING -> PAGE_POISONING_ZERO
tree
|
commitdiff
2020-10-22
Alexander Popov
Improve AND check reports
tree
|
commitdiff
2020-10-22
Alexander Popov
Improve HARDEN_EL2_VECTORS check
tree
|
commitdiff
2020-10-22
Alexander Popov
Merge remote-tracking branch 'pgils/el2_vectors'
tree
|
commitdiff
2020-10-21
Alexander Popov
Add nested ComplexOptChecks support
tree
|
commitdiff
2020-10-19
Pelle van Gils
Do not check CONFIG_HARDEN_EL2_VECTORS for v5.9+
48/head
tree
|
commitdiff
2020-10-16
Alexander Popov
Add TODO about SLUB_DEBUG_ON
tree
|
commitdiff
2020-10-16
Alexander Popov
Add CLIP OS recommendation about EFI_CUSTOM_SSDT_OVERLAYS
tree
|
commitdiff
2020-10-16
Alexander Popov
Disabling ACPI_TABLE_UPGRADE is now recommended by...
tree
|
commitdiff
2020-10-16
Alexander Popov
Withdraw my recommendation about BPF_JIT
tree
|
commitdiff
2020-10-14
Alexander Popov
Use cross compiler to build defconfigs
tree
|
commitdiff
2020-10-14
Alexander Popov
Add defconfigs for Linux kernel v5.9
tree
|
commitdiff
2020-07-15
Alexander Popov
Fix relevant pylint warnings
tree
|
commitdiff
2020-07-15
Alexander Popov
Fix 'decision' priority order ('lockdown' vs 'clipos...
tree
|
commitdiff
2020-07-15
Alexander Popov
Add CLIP OS recommendations about CONFIG_IO_URING and...
tree
|
commitdiff
2020-07-15
Alexander Popov
Add CONFIG_EFI_DISABLE_PCI_DMA recommended by CLIP OS
tree
|
commitdiff
2020-07-15
Alexander Popov
Fix 'decision' -- CONFIG_INTEGRITY is not enabled by...
tree
|
commitdiff
2020-07-15
Alexander Popov
Add defconfigs for Linux kernel v5.7
tree
|
commitdiff
2020-07-15
Alexander Popov
Take new AND use case for X86_PTDUMP / PTDUMP_DEBUGFS
tree
|
commitdiff
2020-07-15
Alexander Popov
Improve ComplexOptCheck use cases
tree
|
commitdiff
2020-07-15
Alexander Popov
Add 'show_ok' and 'show_fail' print modes
tree
|
commitdiff
2020-07-13
Alexander Popov
Declare variables closer to their usage
tree
|
commitdiff
2020-07-13
Alexander Popov
Get rid of 'kernel_version' global variable
tree
|
commitdiff
2020-07-13
Alexander Popov
Big rework of the report modes
tree
|
commitdiff
2020-07-10
Alexander Popov
Add ARM64_PAN
tree
|
commitdiff
next