From bb1fc8b96945a06841a55fd56b23666fdbdd8b71 Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Mon, 24 Jul 2023 00:15:57 +0300 Subject: [PATCH] Check the kernel.dmesg_restrict sysctl --- kconfig_hardened_check/checks.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kconfig_hardened_check/checks.py b/kconfig_hardened_check/checks.py index fc63f3a..e30746c 100644 --- a/kconfig_hardened_check/checks.py +++ b/kconfig_hardened_check/checks.py @@ -609,4 +609,4 @@ def add_sysctl_checks(l, arch): l += [SysctlCheck('self_protection', 'kspp', 'net.core.bpf_jit_harden', '2')] - l += [SysctlCheck('self_protection', 'kspp', 'kernel.dmesg_restrict', '1')] + l += [SysctlCheck('cut_attack_surface', 'kspp', 'kernel.dmesg_restrict', '1')] -- 2.31.1