From 6d850beafed10d69d35acd52ed328b1b5e526591 Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Thu, 13 Dec 2018 00:55:34 +0300 Subject: [PATCH] Check x86 hardening features: X86_SMAP and X86_INTEL_UMIP --- kconfig-hardened-check.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py index e509174..7e8b869 100755 --- a/kconfig-hardened-check.py +++ b/kconfig-hardened-check.py @@ -108,6 +108,8 @@ def construct_checklist(): checklist.append(OptCheck('PAGE_TABLE_ISOLATION', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('RETPOLINE', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('X86_64', 'y', 'ubuntu18', 'self_protection')) + checklist.append(OptCheck('X86_SMAP', 'y', 'ubuntu18', 'self_protection')) + checklist.append(OptCheck('X86_INTEL_UMIP', 'y', 'ubuntu18', 'self_protection')) checklist.append(OR(OptCheck('STRICT_KERNEL_RWX', 'y', 'ubuntu18', 'self_protection'), \ OptCheck('DEBUG_RODATA', 'y', 'before_v4.11', 'self_protection'))) checklist.append(OptCheck('DEBUG_WX', 'y', 'ubuntu18', 'self_protection')) -- 2.31.1