projects
/
kconfig-hardened-check.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅ next
Update the README
[kconfig-hardened-check.git]
/
kernel_hardening_checker
/
2024-01-16
Alexander Popov
Update the Ubuntu example configs
tree
|
commitdiff
2024-01-16
Alexander Popov
Don't print the warning about ARCH_MMAP_RND_BITS in...
tree
|
commitdiff
2024-01-16
Alexander Popov
Improve the check of DEBUG_NOTIFIERS feature (part 2)
tree
|
commitdiff
2024-01-16
Alexander Popov
Improve the check of DEBUG_NOTIFIERS feature
tree
|
commitdiff
2024-01-16
Alexander Popov
Improve the check of SCHED_STACK_END_CHECK.
tree
|
commitdiff
2024-01-16
Alexander Popov
Fix style (III)
tree
|
commitdiff
2024-01-16
Alexander Popov
Fix style (II)
tree
|
commitdiff
2024-01-16
Alexander Popov
Fix style (I)
tree
|
commitdiff
2024-01-16
Alexander Popov
Disable pylint too-many-locals, it's not useful for...
tree
|
commitdiff
2024-01-16
Alexander Popov
Fix pylint W0613: Unused argument 'arch'
tree
|
commitdiff
2024-01-16
Alexander Popov
Fix pylint E1101: Instance of 'OptCheck' has no 'type...
tree
|
commitdiff
2024-01-16
Alexander Popov
Fix pylint W0613: Unused argument 'mode'
tree
|
commitdiff
2024-01-15
Alexander Popov
Update the NixOS configs
tree
|
commitdiff
2024-01-14
Alexander Popov
Don't add options without explicitly recommended values...
tree
|
commitdiff
2024-01-14
Alexander Popov
UBSAN_SANITIZE_ALL is now available for ARM
tree
|
commitdiff
2023-12-30
Alexander Popov
Fix the order in the vdso32 check (part II)
tree
|
commitdiff
2023-12-30
Alexander Popov
Fix the order in the vdso32 check
tree
|
commitdiff
2023-12-30
Alexander Popov
Improve the hackish refinement of the CONFIG_ARCH_MMAP_...
tree
|
commitdiff
2023-12-30
Alexander Popov
Show the option type in print_unknown_options()
tree
|
commitdiff
2023-12-30
Alexander Popov
Use raw strings for regular expression
tree
|
commitdiff
2023-12-30
Alexander Popov
Fix the 'decision' for the 'AIO' check
tree
|
commitdiff
2023-12-29
Alexander Popov
Fix the 'decision' for the 'vdso32' check
tree
|
commitdiff
2023-12-29
Alexander Popov
Improve the comment for the 'slab_common.usercopy_fallb...
tree
|
commitdiff
2023-12-28
Alexander Popov
Fix the arch condition for the SCHED_CORE check (III)
tree
|
commitdiff
2023-12-28
Alexander Popov
Update the KSPP recommendations
tree
|
commitdiff
2023-12-28
Alexander Popov
Fix the arch for the CPU_SRSO check (it's available...
tree
|
commitdiff
2023-12-28
Alexander Popov
Split the HW_RANDOM_TPM check (it's enabled by default...
tree
|
commitdiff
2023-12-28
Alexander Popov
Change the 'decision' of the INIT_STACK_ALL_ZERO check
tree
|
commitdiff
2023-12-17
Alexander Popov
Add defconfigs for Linux v6.6
tree
|
commitdiff
2023-12-16
Alexander Popov
Add the RANDOM_KMALLOC_CACHES check
tree
|
commitdiff
2023-12-16
Alexander Popov
Add the SECURITY_SELINUX_DEBUG check
tree
|
commitdiff
2023-12-16
Alexander Popov
Fix the 'decision' for the LEGACY_TIOCSTI check
tree
|
commitdiff
2023-12-16
Alexander Popov
Add the CONFIG_LIST_HARDENED check
tree
|
commitdiff
2023-12-09
Alexander Popov
Add the gather_data_sampling check
tree
|
commitdiff
2023-12-09
Alexander Popov
Add the CPU_SRSO check
tree
|
commitdiff
2023-12-09
Alexander Popov
Add the SPECULATION_MITIGATIONS check
tree
|
commitdiff
2023-12-09
Alexander Popov
Add the spec_rstack_overflow check
tree
|
commitdiff
2023-12-09
Alexander Popov
Add the MODULE_FORCE_LOAD check
tree
|
commitdiff
2023-12-02
Alexander Popov
Add the check for dis_ucode_ldr
tree
|
commitdiff
2023-12-02
Alexander Popov
Add the MICROCODE_INTEL and MICROCODE_AMD checks
tree
|
commitdiff
2023-12-02
Alexander Popov
Add a check for the 'kfence.sample_interval' boot parameter
tree
|
commitdiff
2023-12-02
Alexander Popov
Add the KFENCE_SAMPLE_INTERVAL check
tree
|
commitdiff
2023-12-02
Alexander Popov
Keep the recommendation to disable kernel modules
tree
|
commitdiff
2023-12-02
Alexander Popov
Add a comment about 'kernel.modules_disabled'
tree
|
commitdiff
2023-12-02
Alexander Popov
add --kernel-version option (#94)
tree
|
commitdiff
2023-12-01
Fabrice Fontaine
add --kernel-version option
94/head
tree
|
commitdiff
2023-10-18
Alexander Popov
Fix the reason for the 'kernel.yama.ptrace_scope' check
tree
|
commitdiff
2023-10-17
Alexander Popov
Add kspp-recommendations/kspp-sysctl.txt
tree
|
commitdiff
2023-10-17
Alexander Popov
Fix the reason for the nosmt check
tree
|
commitdiff
2023-10-17
Alexander Popov
Update kspp-cmdline-x86-64.txt
tree
|
commitdiff
2023-10-17
Alexander Popov
Add the 'dev.tty.legacy_tiocsti' check
tree
|
commitdiff
2023-10-17
Alexander Popov
Add the 'kernel.randomize_va_space' check
tree
|
commitdiff
2023-10-17
Alexander Popov
Add the 'fs.suid_dumpable' check
tree
|
commitdiff
2023-10-17
Alexander Popov
Change the reason of the COREDUMP check
tree
|
commitdiff
2023-10-17
Alexander Popov
Add the 'fs.protected_regular' check
tree
|
commitdiff
2023-10-17
Alexander Popov
Add the 'fs.protected_fifos' check
tree
|
commitdiff
2023-10-17
Alexander Popov
Add the 'fs.protected_hardlinks' check
tree
|
commitdiff
2023-10-17
Alexander Popov
Add the 'fs.protected_symlinks' check
tree
|
commitdiff
2023-10-17
Alexander Popov
Add the 'vm.unprivileged_userfaultfd' check
tree
|
commitdiff
2023-10-17
Alexander Popov
Add the 'kernel.yama.ptrace_scope' check
tree
|
commitdiff
2023-10-17
Alexander Popov
Add the 'kernel.kptr_restrict' check
tree
|
commitdiff
2023-10-17
Alexander Popov
Improve the slab_common.usercopy_fallback check
tree
|
commitdiff
2023-10-17
Alexander Popov
hardened_usercopy=1 is now officially recommended by...
tree
|
commitdiff
2023-10-16
Alexander Popov
Enabling page_alloc.shuffle is now recommended by KSPP
tree
|
commitdiff
2023-10-16
Alexander Popov
'mitigations=auto,nosmt' is now recommended by KSPP
tree
|
commitdiff
2023-10-16
Alexander Popov
Disabling X86_VSYSCALL_EMULATION is now recommended...
tree
|
commitdiff
2023-10-16
Alexander Popov
Use /usr/bin/env in shebangs (#90)
tree
|
commitdiff
2023-10-05
Sandro Jäckel
Use /usr/bin/env in shebangs
90/head
tree
|
commitdiff
2023-10-04
Alexander Popov
Drop ZERO_CALL_USED_REGS in favour of backward-edge CFI
tree
|
commitdiff
2023-09-18
Alexander Popov
Refactor the assertion in colorize_result() to improve...
tree
|
commitdiff
2023-09-17
Alexander Popov
Rename kconfig-hardened-check into kernel-hardening...
tree
|
commitdiff
2023-09-17
Alexander Popov
kconfig-hardened-check -> kernel-hardening-checker
tree
|
commitdiff