From a740d952458f12525d9b5edecf8a3e35f5ed2650 Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Sat, 2 Dec 2023 20:46:14 +0300 Subject: [PATCH] Add the check for dis_ucode_ldr Thanks to @izh1979 for the idea --- kernel_hardening_checker/checks.py | 1 + 1 file changed, 1 insertion(+) diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py index 9fc92e5..5daf889 100644 --- a/kernel_hardening_checker/checks.py +++ b/kernel_hardening_checker/checks.py @@ -420,6 +420,7 @@ def add_cmdline_checks(l, arch): l += [CmdlineCheck('self_protection', 'defconfig', 'nospectre_v2', 'is not set')] l += [CmdlineCheck('self_protection', 'defconfig', 'nospectre_bhb', 'is not set')] l += [CmdlineCheck('self_protection', 'defconfig', 'nospec_store_bypass_disable', 'is not set')] + l += [CmdlineCheck('self_protection', 'defconfig', 'dis_ucode_ldr', 'is not set')] l += [CmdlineCheck('self_protection', 'defconfig', 'arm64.nobti', 'is not set')] l += [CmdlineCheck('self_protection', 'defconfig', 'arm64.nopauth', 'is not set')] l += [CmdlineCheck('self_protection', 'defconfig', 'arm64.nomte', 'is not set')] -- 2.31.1