Merge branch 'open_check'
[kconfig-hardened-check.git] / kernel_hardening_checker /
2024-06-02 Alexander PopovMerge branch 'open_check'
2024-06-02 Alexander PopovCheck that the cmdline file is not empty
2024-06-02 Alexander PopovAlso check that the cmdline file and sysctl file exist
2024-06-02 Alexander PopovMerge branch 'master' into open-check
2024-06-02 Alexander PopovCheck MITIGATION_SPECTRE_BHI and spectre_bhi
2024-06-02 Alexander PopovCheck MITIGATION_RFDS and reg_file_data_sampling
2024-06-02 Alexander PopovAdd the new name of SPECULATION_MITIGATIONS
2024-06-02 Alexander PopovAdd the new names of RETPOLINE, CPU_SRSO, SLS
2024-06-02 Alexander PopovAdd the new name of PAGE_TABLE_ISOLATION
2024-05-14 Alexander PopovMerge remote-tracking branch 'origin/pylint'
2024-05-14 Alexander PopovDon't use TODO to avoid pylint warnings 136/head
2024-05-14 Alexander PopovDrop 'disable=invalid-name' for pylint
2024-05-14 Alexander PopovDrop __about__.py and use 'version = attr:' in setup.cfg
2024-05-13 Alexander PopovMerge branch 'typing'
2024-05-13 Alexander PopovIntroduce ResultType and improve static typing in test_...
2024-05-13 Alexander PopovImprove the VersionCheck static typing
2024-05-13 Alexander PopovImprove typing and drop the unused **kwargs in the...
2024-05-13 Alexander PopovImprove _open() to avoid mypy and pylint warnings
2024-05-13 Alexander PopovStyle fixes for engine import
2024-05-13 Alexander PopovUse dict instead of OrderedDict
2024-05-13 Alexander PopovAdd more typing annotations to test_engine.py
2024-05-13 Alexander PopovFix mypy typing warnings for ChecklistObjType
2024-05-13 Alexander PopovAdd more precise typing for checklist: List[ChecklistOb...
2024-05-13 Alexander PopovFix assertion style
2024-05-13 Alexander PopovFix mypy typing warnings in engine.py
2024-05-13 Alexander PopovAdd more typing annotations to engine.py
2024-05-13 Alexander PopovMove print_unknown_options() to engine.py
2024-05-12 Alexander PopovAdd more precise typing for OrderedDict
2024-05-12 Alexander PopovAdd more typing annotations to checks.py
2024-05-12 Alexander PopovMake the static typing work for Python v3.8
2024-05-12 Alexander PopovFix mypy typing warnings in __init__.py
2024-05-12 Alexander PopovAdd more typing annotations to __init__.py
2024-05-12 Alexander PopovFix pylint warnings in _open
2024-05-12 jvoisinAdd a check to `_open`
2024-05-12 Alexander PopovFix mypy warning in _open()
2024-05-12 Alexander PopovFix mypy warning in json_dump()
2024-05-03 Julien VoisinMerge branch 'master' into typing
2024-05-02 Alexander PopovMerge branch 'skip_sysctl'
2024-05-02 Alexander PopovStyle fixes, should be no functional changes 125/head
2024-05-02 Alexander PopovFix the reason and decision of the KEXEC_CORE check
2024-05-02 Alexander PopovFix the reason and decision of the BPF_JIT check
2024-05-02 Alexander PopovRestore the `dev.tty.legacy_tiocsti` check
2024-05-02 Alexander PopovUse CONFIG_LOCALVERSION instead of CONFIG_DEFAULT_INIT...
2024-05-02 Eneas U de Queirozskip kernel.modules_disabled if MODULES not set
2024-05-02 Eneas U de QueirozSkip unprivileged_userfaultfd if USERFAULTFD unset
2024-05-02 Eneas U de QueirozDon't fail if dev.tty.legacy_tiocsti not found
2024-05-02 Eneas U de QueirozSkip unprivileged_bpf_disabled if BPF_SYSCALL not set
2024-05-02 Eneas U de QueirozSkip kexec_load_disabled if KEXEC_CORE is not set
2024-05-02 Eneas U de QueirozSkip bpf_jit_harden sysctl if BPF_JIT is not set
2024-04-30 Alexander PopovMerge branch 'cpu_depend'
2024-04-30 jvoisinAdd some lightweight typing
2024-04-30 Alexander PopovFix the reason and decision for CPU_SUP_INTEL 123/head
2024-04-30 Alexander PopovStyle fixes
2024-04-23 Eneas U de QueirozSkip CPU-dependent checks if CPU is not supported
2024-04-21 Alexander PopovLike grep, colorize the output only if stdout is connec...
2024-04-21 Alexander PopovDon't use the `type` name for the class methods
2024-04-18 Alexander PopovAdd the BLK_DEV_WRITE_MOUNTED/bdev_allow_write_mounted...
2024-04-17 Alexander PopovMerge branch 'shstk'
2024-04-17 Alexander PopovFix 'decision' for the X86_USER_SHADOW_STACK check 120/head
2024-04-15 jvoisinAdd a check for X86_USER_SHADOW_STACK
2024-03-30 Alexander PopovAdd a comment that 'user.max_user_namespaces=0' may...
2024-03-25 Alexander PopovImprove the CONFIG_CFI_CLANG checks (add the CONFIG_CC_...
2024-03-25 Alexander PopovDrop the GCC_PLUGINS check (checking CC_IS_GCC is enough)
2024-03-25 Alexander PopovAdd the CONFIG_CC_IS_GCC dependency for gcc plugins
2024-03-25 Alexander PopovDon't require GCC_PLUGINS separately
2024-03-24 Alexander PopovRename the 'my' check decision to 'a13xp0p0v'
2024-03-17 Alexander PopovMake the table column names and JSON field names fit...
2024-03-17 Alexander PopovMerge remote-tracking branch 'krishjainx/improve-json...
2024-03-17 krishjainxupdate 115/head
2024-03-17 krishjainxfix issues
2024-03-14 krishjainxFix tests to work with new JSON schema
2024-03-14 krishjainxImprove JSON output format for enhanced processing
2024-03-11 Alexander PopovImprove the DEBUG_CREDENTIALS check
2024-03-10 Alexander PopovFix the false result of the REFCOUNT_FULL check for...
2024-03-09 Alexander PopovAdapt test_version() in the unittest
2024-03-09 Alexander PopovCheck all 3 numbers of the kernel version in VersionCheck
2024-03-09 Alexander PopovFix the fresh set_state() bug found by unittest
2024-03-09 Alexander PopovMake `python -m unittest` show the whole output
2024-03-09 Alexander PopovImplement the set_state() method of the check classes
2024-03-09 Alexander PopovUse 3 numbers in the VersionCheck constructor
2024-03-09 Alexander PopovParse all numbers of the kernel version
2024-03-09 Alexander PopovSkip the kernel version part after '-'
2024-03-04 Alexander PopovAdd the ia32_emulation check
2024-02-19 Alexander PopovAdd MODULE_SIG_SHA3_512 as a valid option
2024-02-17 Alexander PopovMake LOCKDOWN_LSM 'self_protection', not 'security_policy'
2024-01-16 Alexander PopovReady for the release 0.6.6 v0.6.6
2024-01-16 Alexander PopovUpdate the Ubuntu example configs
2024-01-16 Alexander PopovDon't print the warning about ARCH_MMAP_RND_BITS in...
2024-01-16 Alexander PopovImprove the check of DEBUG_NOTIFIERS feature (part 2)
2024-01-16 Alexander PopovImprove the check of DEBUG_NOTIFIERS feature
2024-01-16 Alexander PopovImprove the check of SCHED_STACK_END_CHECK.
2024-01-16 Alexander PopovFix style (III)
2024-01-16 Alexander PopovFix style (II)
2024-01-16 Alexander PopovFix style (I)
2024-01-16 Alexander PopovDisable pylint too-many-locals, it's not useful for...
2024-01-16 Alexander PopovFix pylint W0613: Unused argument 'arch'
2024-01-16 Alexander PopovFix pylint E1101: Instance of 'OptCheck' has no 'type...
2024-01-16 Alexander PopovFix pylint W0613: Unused argument 'mode'
2024-01-15 Alexander PopovUpdate the NixOS configs
2024-01-14 Alexander PopovDon't add options without explicitly recommended values...
next