From 55bd5ec62061d3c28d17576f3ebcc0630529c6af Mon Sep 17 00:00:00 2001 From: =?utf8?q?Lo=C3=AFc?= <4661917+HacKurx@users.noreply.github.com> Date: Wed, 18 Jul 2018 20:34:28 +0200 Subject: [PATCH] Add Grsecurity recommendation on BINFMT_AOUT Linux historical interest is not secure ;) Conflicts resolved by @a13xp0p0v --- kconfig-hardened-check.py | 1 + 1 file changed, 1 insertion(+) diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py index ac2644f..30f3d17 100755 --- a/kconfig-hardened-check.py +++ b/kconfig-hardened-check.py @@ -112,6 +112,7 @@ def construct_opt_checks(): checklist.append(OptCheck('ZSMALLOC_STAT', 'is not set', 'ubuntu18', 'cut_attack_surface')) checklist.append(OptCheck('PAGE_OWNER', 'is not set', 'ubuntu18', 'cut_attack_surface')) checklist.append(OptCheck('DEBUG_KMEMLEAK', 'is not set', 'ubuntu18', 'cut_attack_surface')) + checklist.append(OptCheck('BINFMT_AOUT', 'is not set', 'ubuntu18', 'cut_attack_surface')) checklist.append(OptCheck('IO_STRICT_DEVMEM', 'y', 'kspp', 'cut_attack_surface')) checklist.append(OptCheck('LEGACY_VSYSCALL_NONE', 'y', 'kspp', 'cut_attack_surface')) # 'vsyscall=none' -- 2.31.1