summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
Alexander Popov [Wed, 20 Jun 2018 21:07:52 +0000 (00:07 +0300)]
Disable buggy IP_SCTP to cut attack surface
Alexander Popov [Wed, 20 Jun 2018 21:09:12 +0000 (00:09 +0300)]
Disable only CONFIG_USER_NS, not whole CONFIG_NAMESPACES
Thanks to @Bernhard40 for the correction
Signed-off-by: Alexander Popov <alex.popov@linux.com>
Alexander Popov [Wed, 20 Jun 2018 14:09:42 +0000 (17:09 +0300)]
Add kconfig-hardened-check.py
This script helps me to check the Linux kernel Kconfig option list
against my hardening preferences for x86_64.
Nobody likes checking configs manually. Let the computers do their job!
Signed-off-by: Alexander Popov <alex.popov@linux.com>
projects / kconfig-hardened-check.git / log