From 9b14224a320d8e91fa127e0da5abbfa0c852ac5f Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Tue, 30 Apr 2024 11:02:32 +0300 Subject: [PATCH] Fix the reason and decision for CPU_SUP_INTEL --- kernel_hardening_checker/checks.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py index 92e97af..47036d6 100644 --- a/kernel_hardening_checker/checks.py +++ b/kernel_hardening_checker/checks.py @@ -561,7 +561,7 @@ def add_cmdline_checks(l, arch): l += [OR(CmdlineCheck('cut_attack_surface', 'defconfig', 'tsx', 'off'), AND(KconfigCheck('cut_attack_surface', 'defconfig', 'X86_INTEL_TSX_MODE_OFF', 'y'), tsx_not_set), - AND(KconfigCheck('cut_attack_surface', 'defconfig', 'CPU_SUP_INTEL', 'is not set'), + AND(KconfigCheck('-', '-', 'CPU_SUP_INTEL', 'is not set'), tsx_not_set))] # 'cut_attack_surface', 'kspp' -- 2.31.1