From cf84449ddd15b770b74b715856518d062ad9287b Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Thu, 13 Dec 2018 00:54:51 +0300 Subject: [PATCH] Add SECURITY_LOADPIN check --- kconfig-hardened-check.py | 1 + 1 file changed, 1 insertion(+) diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py index 9cdf182..e509174 100755 --- a/kconfig-hardened-check.py +++ b/kconfig-hardened-check.py @@ -155,6 +155,7 @@ def construct_checklist(): checklist.append(OptCheck('SLUB_DEBUG_ON', 'y', 'my', 'self_protection')) checklist.append(OptCheck('SECURITY_DMESG_RESTRICT', 'y', 'my', 'self_protection')) checklist.append(OptCheck('STATIC_USERMODEHELPER', 'y', 'my', 'self_protection')) # breaks systemd? + checklist.append(OptCheck('SECURITY_LOADPIN', 'y', 'my', 'self_protection')) checklist.append(OptCheck('PAGE_POISONING_NO_SANITY', 'is not set', 'my', 'self_protection')) checklist.append(OptCheck('PAGE_POISONING_ZERO', 'is not set', 'my', 'self_protection')) checklist.append(OptCheck('SLAB_MERGE_DEFAULT', 'is not set', 'my', 'self_protection')) # slab_nomerge -- 2.31.1