From cf8d3739c10cd9e6e1b768b0fadd2518f97b9f99 Mon Sep 17 00:00:00 2001 From: jvoisin Date: Mon, 15 Apr 2024 14:05:42 +0200 Subject: [PATCH] Add a check for X86_USER_SHADOW_STACK This should close #114 --- kernel_hardening_checker/checks.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py index 5aff75e..21f4d2f 100644 --- a/kernel_hardening_checker/checks.py +++ b/kernel_hardening_checker/checks.py @@ -400,6 +400,8 @@ def add_kconfig_checks(l, arch): l += [KconfigCheck('cut_attack_surface', 'a13xp0p0v', 'MODULE_FORCE_LOAD', 'is not set')] # 'harden_userspace' + if arch == 'X86_64': + l += [KconfigCheck('harden_userspace', 'defconfig', 'X86_USER_SHADOW_STACK', 'y')] if arch == 'ARM64': l += [KconfigCheck('harden_userspace', 'defconfig', 'ARM64_PTR_AUTH', 'y')] l += [KconfigCheck('harden_userspace', 'defconfig', 'ARM64_BTI', 'y')] -- 2.31.1