projects
/
kconfig-hardened-check.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
Add the tsx check
[kconfig-hardened-check.git]
/
kconfig_hardened_check
/
2022-12-10
Alexander Popov
Add the tsx check
tree
|
commitdiff
2022-12-10
Alexander Popov
Change the 'decision' of X86_INTEL_TSX_MODE_OFF check...
tree
|
commitdiff
2022-12-10
Alexander Popov
Add the nomte check
tree
|
commitdiff
2022-12-10
Alexander Popov
Add the nopauth check
tree
|
commitdiff
2022-12-10
Alexander Popov
Add the nobti check
tree
|
commitdiff
2022-12-09
Alexander Popov
Add the sysrq_always_enabled check
tree
|
commitdiff
2022-12-09
Alexander Popov
Add the ssbd check
tree
|
commitdiff
2022-12-08
Alexander Popov
Reorder some checks, no functional changes
tree
|
commitdiff
2022-11-17
Alexander Popov
Add the srbds check
tree
|
commitdiff
2022-11-17
Alexander Popov
Add the retbleed check
tree
|
commitdiff
2022-11-17
Alexander Popov
Add the mmio_stale_data check
tree
|
commitdiff
2022-11-17
Alexander Popov
Add the tsx_async_abort check
tree
|
commitdiff
2022-11-17
Alexander Popov
Add the mds check
tree
|
commitdiff
2022-11-17
Alexander Popov
Add the l1tf check
tree
|
commitdiff
2022-11-17
Alexander Popov
Add the spectre_v2_user check
tree
|
commitdiff
2022-11-17
Alexander Popov
Do refactoring in normalize_cmdline_options()
tree
|
commitdiff
2022-11-17
Alexander Popov
Add the spec_store_bypass_disable check
tree
|
commitdiff
2022-11-17
Alexander Popov
Add the spectre_v2 check
tree
|
commitdiff
2022-11-17
Alexander Popov
Introduce the 'is present' check instead of expected...
tree
|
commitdiff
2022-11-11
Alexander Popov
Add the 'mitigations' check
tree
|
commitdiff
2022-11-09
Alexander Popov
Add the nosmt check
tree
|
commitdiff
2022-11-09
Alexander Popov
Add a special 'desired val' -- 'is not off'
tree
|
commitdiff
2022-11-09
Alexander Popov
Improve the result descriptions
tree
|
commitdiff
2022-11-08
Alexander Popov
Add assertions to check arguments of the Class constructors
tree
|
commitdiff
2022-10-23
Alexander Popov
Add the ARM64_E0PD check
tree
|
commitdiff
2022-10-23
Alexander Popov
Fix the SCHED_CORE check: it's now available for ARM64...
tree
|
commitdiff
2022-10-23
Alexander Popov
Update the self-protection checks adopted by KSPP ...
tree
|
commitdiff
2022-10-22
Alexander Popov
Update the self-protection checks adopted by KSPP ...
tree
|
commitdiff
2022-10-22
Alexander Popov
Update the self-protection checks adopted by KSPP ...
tree
|
commitdiff
2022-10-22
Alexander Popov
Update the KSPP recommendations again
tree
|
commitdiff
2022-10-13
Alexander Popov
Update the self-protection checks adopted by KSPP ...
tree
|
commitdiff
2022-10-13
Alexander Popov
Update the self-protection checks adopted by KSPP ...
tree
|
commitdiff
2022-10-13
Alexander Popov
Update the HW_RANDOM_TPM check
tree
|
commitdiff
2022-10-13
Alexander Popov
Update the UBSAN checks according to the KSPP recommend...
tree
|
commitdiff
2022-10-13
Alexander Popov
Update the security policy checks adopted by KSPP
tree
|
commitdiff
2022-10-13
Alexander Popov
Update the KSPP recommendations
tree
|
commitdiff
2022-10-09
Alexander Popov
Drop some of my security policy recommendations
tree
|
commitdiff
2022-10-09
Alexander Popov
Check SECURITY_SELINUX_DEVELOP (recommended by Clip OS)
tree
|
commitdiff
2022-10-09
Alexander Popov
Check SECURITY_SELINUX_BOOTPARAM (recommended by Clip OS)
tree
|
commitdiff
2022-10-09
Alexander Popov
Improve the HW_RANDOM_TPM check
tree
|
commitdiff
2022-10-09
Alexander Popov
Check COREDUMP (recommended by Clip OS)
tree
|
commitdiff
2022-10-09
Alexander Popov
Check CONFIG_HW_RANDOM_TPM (recommended by Clip OS)
tree
|
commitdiff
2022-10-09
Alexander Popov
Check X86_MCE, X86_MCE_INTEL, X86_MCE_AMD (recommended...
tree
|
commitdiff
2022-10-02
Alexander Popov
Also check 'nospectre_v2' with 'spectre_v2'
tree
|
commitdiff
2022-10-02
Alexander Popov
Change the reason for the 'nopti' check
tree
|
commitdiff
2022-10-02
Alexander Popov
Change the reason for the 'nokaslr' check
tree
|
commitdiff
2022-10-02
Alexander Popov
Add the 'spectre_v2' check
tree
|
commitdiff
2022-10-02
Alexander Popov
Add the 'nospectre_v2' check
tree
|
commitdiff
2022-10-02
Alexander Popov
Change the reason for the 'nosmep' and 'nosmap' checks
tree
|
commitdiff
2022-10-02
Alexander Popov
Add the 'nospectre_v1' check
tree
|
commitdiff
2022-10-02
Alexander Popov
Add the 'nopti' check
tree
|
commitdiff
2022-09-24
Alexander Popov
Add the comments: CC_IS_GCC and CC_IS_CLANG exist since...
tree
|
commitdiff
2022-09-24
Alexander Popov
Add the UBSAN_LOCAL_BOUNDS check for Clang build
tree
|
commitdiff
2022-09-18
Alexander Popov
Update the links to AOSP and GKI
tree
|
commitdiff
2022-09-02
Alexander Popov
Detect the compiler used for the kernel compilation
tree
|
commitdiff
2022-09-02
Alexander Popov
Don't use CONFIG_CC_IS_GCC in the checks (it was introd...
tree
|
commitdiff
2022-09-02
Alexander Popov
Move get-nix-kconfig.py to kconfig_hardened_check/confi...
tree
|
commitdiff
2022-09-02
Alexander Popov
Fix the X86_SMAP check: it is enabled by default since...
tree
|
commitdiff
2022-09-02
Alexander Popov
Check the nosmap and nosmep cmdline parameters
tree
|
commitdiff
2022-09-02
Alexander Popov
Adapt the RANDSTRUCT checks to the changes in Linux...
tree
|
commitdiff
2022-09-02
Alexander Popov
Fix the comment: SHADOW_CALL_STACK is now available...
tree
|
commitdiff
2022-09-02
Alexander Popov
Add the SECURITY_LANDLOCK recommendation by KSPP
tree
|
commitdiff
2022-08-23
Alexander Popov
Check the nokaslr cmdline parameter
tree
|
commitdiff
2022-08-20
Alexander Popov
Require GCC for the GCC plugins (part II)
tree
|
commitdiff
2022-08-20
Alexander Popov
Require GCC for the GCC plugins
tree
|
commitdiff
2022-08-20
Alexander Popov
Introduce cc_is_gcc and cc_is_clang
tree
|
commitdiff
2022-08-20
Alexander Popov
No, the 'page_alloc.shuffle' should be set anyway
tree
|
commitdiff
2022-08-20
Alexander Popov
Drop the comment about slub_debug=FZ
tree
|
commitdiff
2022-08-17
Alexander Popov
Add the debugfs check
tree
|
commitdiff
2022-08-17
Alexander Popov
Improve the comments
tree
|
commitdiff
2022-08-17
Alexander Popov
Add the 'page_alloc.shuffle' check
tree
|
commitdiff
2022-08-14
Alexander Popov
Add more values for the normalization
tree
|
commitdiff
2022-08-14
Alexander Popov
Implement the normalization of cmdline options
tree
|
commitdiff
2022-08-14
Alexander Popov
Describe the meaning of the checks
tree
|
commitdiff
2022-08-13
Alexander Popov
Check the 'rodata' cmdline parameter on the arches...
tree
|
commitdiff
2022-08-13
Alexander Popov
Check hardened_usercopy in the cmdline
tree
|
commitdiff
2022-08-13
Alexander Popov
Add the comment about vm.mmap_min_addr sysctl (for...
tree
|
commitdiff
2022-08-13
Alexander Popov
SECURITY_DMESG_RESTRICT is more about cutting attack...
tree
|
commitdiff
2022-07-21
Alexander Popov
Improve the slab_common.usercopy_fallback check
tree
|
commitdiff
2022-07-21
Alexander Popov
Add the slab_common.usercopy_fallback check
tree
|
commitdiff
2022-07-21
Alexander Popov
Improve the STACKPROTECTOR check
tree
|
commitdiff
2022-07-21
Alexander Popov
Don't mention LKDTM
tree
|
commitdiff
2022-07-17
Alexander Popov
Check ARM64_BTI for userspace hardening
tree
|
commitdiff
2022-07-17
Alexander Popov
Check ARM64_PTR_AUTH for userspace hardening
tree
|
commitdiff
2022-07-17
Alexander Popov
Add rodata check for ARM64
tree
|
commitdiff
2022-07-11
Alexander Popov
Add iommu.passthrough check
tree
|
commitdiff
2022-07-11
Alexander Popov
Add IOMMU_DEFAULT_PASSTHROUGH check
tree
|
commitdiff
2022-07-11
Alexander Popov
Add iommu.strict check
tree
|
commitdiff
2022-07-11
Alexander Popov
Add vsyscall check
tree
|
commitdiff
2022-07-09
Alexander Popov
Don't add CmdlineChecks in add_kconfig_checks() to...
tree
|
commitdiff
2022-07-09
Alexander Popov
Add slub_debug check
tree
|
commitdiff
2022-06-20
Alexander Popov
Add the init_on_free check
tree
|
commitdiff
2022-06-20
Alexander Popov
Add the page_poison check required for PAGE_POISONING_ZERO
tree
|
commitdiff
2022-06-20
Alexander Popov
Rewrite the slab_nomerge check
tree
|
commitdiff
2022-06-20
Alexander Popov
Rewrite the randomize_kstack_offset check
tree
|
commitdiff
2022-06-19
Alexander Popov
Check that a kconfig option value is sane
tree
|
commitdiff
2022-06-19
Alexander Popov
Add a tricky check for init_on_alloc and INIT_ON_ALLOC_...
tree
|
commitdiff
2022-06-19
Alexander Popov
Move the add_cmdline_checks() call earlier
tree
|
commitdiff
2022-06-08
Alexander Popov
Don't check __name__ in __init__.py (it can't run separ...
tree
|
commitdiff
2022-06-08
Alexander Popov
Fix the pylint warning about isinstance
tree
|
commitdiff
next