From d88babb1ff613fc99c64be05d1be39823ca6001c Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Mon, 30 Jul 2018 16:53:42 +0300 Subject: [PATCH] Add DEBUG_SET_MODULE_RONX as old alternative to STRICT_MODULE_RWX --- kconfig-hardened-check.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py index d86b429..445f4b7 100755 --- a/kconfig-hardened-check.py +++ b/kconfig-hardened-check.py @@ -104,7 +104,6 @@ def construct_checklist(): checklist.append(OptCheck('RETPOLINE', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('X86_64', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('STRICT_KERNEL_RWX', 'y', 'ubuntu18', 'self_protection')) - checklist.append(OptCheck('STRICT_MODULE_RWX', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('DEBUG_WX', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('RANDOMIZE_BASE', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('RANDOMIZE_MEMORY', 'y', 'ubuntu18', 'self_protection')) @@ -118,6 +117,8 @@ def construct_checklist(): checklist.append(OptCheck('SLAB_FREELIST_RANDOM', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('HARDENED_USERCOPY', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('FORTIFY_SOURCE', 'y', 'ubuntu18', 'self_protection')) + checklist.append(OR(OptCheck('STRICT_MODULE_RWX', 'y', 'ubuntu18', 'self_protection'), \ + OptCheck('DEBUG_SET_MODULE_RONX', 'y', 'before_v4.11', 'self_protection'), modules_not_set)) checklist.append(OR(OptCheck('MODULE_SIG', 'y', 'ubuntu18', 'self_protection'), modules_not_set)) checklist.append(OR(OptCheck('MODULE_SIG_ALL', 'y', 'ubuntu18', 'self_protection'), modules_not_set)) checklist.append(OR(OptCheck('MODULE_SIG_SHA512', 'y', 'ubuntu18', 'self_protection'), modules_not_set)) -- 2.31.1