From 5d007e67c6db0af09c6cf5a303cfea23e4234403 Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Thu, 21 Jul 2022 09:27:47 +0300 Subject: [PATCH] Don't mention LKDTM I can't recommend disabling it, because LKDTM is used to test the kernel hardening features. But I cant recommend enabling it, because LKDTM contains intentional memory corruption errors. It's not for production systems. So let's simply drop the comment about LKDTM. --- kconfig_hardened_check/__init__.py | 2 -- 1 file changed, 2 deletions(-) diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py index 4c6353f..3daddcb 100644 --- a/kconfig_hardened_check/__init__.py +++ b/kconfig_hardened_check/__init__.py @@ -639,8 +639,6 @@ def add_kconfig_checks(l, arch): if arch in ('X86_32', 'ARM'): l += [KconfigCheck('harden_userspace', 'my', 'ARCH_MMAP_RND_BITS', '16')] -# l += [KconfigCheck('feature_test', 'my', 'LKDTM', 'm')] # only for debugging! - def add_cmdline_checks(l, arch): # Calling the CmdlineCheck class constructor: -- 2.31.1