From f6fa3b3835e1ec6bb6ab2382653ed4eca6149209 Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Mon, 30 Jul 2018 17:06:04 +0300 Subject: [PATCH] Add DEBUG_RODATA as old alternative to STRICT_KERNEL_RWX --- kconfig-hardened-check.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py index ec03bf4..ff17721 100755 --- a/kconfig-hardened-check.py +++ b/kconfig-hardened-check.py @@ -103,7 +103,8 @@ def construct_checklist(): checklist.append(OptCheck('PAGE_TABLE_ISOLATION', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('RETPOLINE', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('X86_64', 'y', 'ubuntu18', 'self_protection')) - checklist.append(OptCheck('STRICT_KERNEL_RWX', 'y', 'ubuntu18', 'self_protection')) + checklist.append(OR(OptCheck('STRICT_KERNEL_RWX', 'y', 'ubuntu18', 'self_protection'), \ + OptCheck('DEBUG_RODATA', 'y', 'before_v4.11', 'self_protection'))) checklist.append(OptCheck('DEBUG_WX', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('RANDOMIZE_BASE', 'y', 'ubuntu18', 'self_protection')) checklist.append(OptCheck('RANDOMIZE_MEMORY', 'y', 'ubuntu18', 'self_protection')) -- 2.31.1