jxself.org public git repositories - kconfig-hardened-check.git/search

projects / kconfig-hardened-check.git / search

2024-07-03	Alexander Popov	Update the KFENCE_SAMPLE_INTERVAL check	commit \| commitdiff \| tree
2024-06-19	Alexander Popov	Comment out the RANDSTRUCT_PERFORMANCE check	commit \| commitdiff \| tree
2024-06-19	Alexander Popov	Update the KSPP recommendations (https://github.com...	commit \| commitdiff \| tree
2024-06-16	Alexander Popov	Update the 'kernel.modules_disabled' check	commit \| commitdiff \| tree
2024-06-16	Alexander Popov	Add the 'kernel.oops_limit' and 'kernel.warn_limit...	commit \| commitdiff \| tree
2024-06-16	Alexander Popov	Add the "cfi" check	commit \| commitdiff \| tree
2024-06-16	Alexander Popov	Add the "MAGIC_SYSRQ_SERIAL" check	commit \| commitdiff \| tree
2024-06-16	Alexander Popov	Add the "kernel.sysrq" check	commit \| commitdiff \| tree
2024-06-15	Alexander Popov	Add the MAGIC_SYSRQ_DEFAULT_ENABLE check	commit \| commitdiff \| tree
2024-06-15	Alexander Popov	Sync with KSPP: update the `decision` for some checks	commit \| commitdiff \| tree
2024-06-15	Alexander Popov	Add CONFIG_CC_IS_CLANG and CONFIG_CC_IS_GCC to the...	commit \| commitdiff \| tree
2024-06-15	Alexander Popov	ruff: Fix EXE001 "Shebang is present but file is not...	commit \| commitdiff \| tree
2024-06-10	Alexander Popov	Add the comment about 'if arch' for the 'cut_attack_surface...	commit \| commitdiff \| tree
2024-06-10	Alexander Popov	Update the KSPP recommendations	commit \| commitdiff \| tree
2024-06-10	Alexander Popov	Code refactoring to improve test coverage (II)	commit \| commitdiff \| tree
2024-06-10	Alexander Popov	Code refactoring to improve test coverage (I)	commit \| commitdiff \| tree
2024-06-09	Alexander Popov	Merge branch 'scs-pac'	commit \| commitdiff \| tree
2024-06-09	Alexander Popov	Merge branch 'page-table-check'	commit \| commitdiff \| tree
2024-06-02	Alexander Popov	Merge branch 'open_check'	commit \| commitdiff \| tree
2024-06-02	Alexander Popov	CI: Add the test for the code checking that the cmdline...	commit \| commitdiff \| tree
2024-06-02	Alexander Popov	CI: Add the tests for the code checking that the config...	commit \| commitdiff \| tree
2024-06-02	Alexander Popov	Check that the cmdline file is not empty	commit \| commitdiff \| tree
2024-06-02	Alexander Popov	Also check that the cmdline file and sysctl file exist	commit \| commitdiff \| tree
2024-06-02	Alexander Popov	Merge branch 'master' into open-check	commit \| commitdiff \| tree
2024-06-02	Alexander Popov	Check MITIGATION_SPECTRE_BHI and spectre_bhi	commit \| commitdiff \| tree
2024-06-02	Alexander Popov	Check MITIGATION_RFDS and reg_file_data_sampling	commit \| commitdiff \| tree
2024-06-02	Alexander Popov	Add the new name of SPECULATION_MITIGATIONS	commit \| commitdiff \| tree
2024-06-02	Alexander Popov	Add the new names of RETPOLINE, CPU_SRSO, SLS	commit \| commitdiff \| tree
2024-06-02	Alexander Popov	Add the new name of PAGE_TABLE_ISOLATION	commit \| commitdiff \| tree
2024-05-14	Alexander Popov	Merge remote-tracking branch 'origin/pylint'	commit \| commitdiff \| tree
2024-05-14	Alexander Popov	Don't use TODO to avoid pylint warnings	commit \| commitdiff \| tree
2024-05-14	Alexander Popov	CI: add pylint	commit \| commitdiff \| tree
2024-05-14	Alexander Popov	Drop 'disable=invalid-name' for pylint	commit \| commitdiff \| tree
2024-05-14	Alexander Popov	Drop __about__.py and use 'version = attr:' in setup.cfg	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	CI: Add the mypy arguments to the WoodPecker CI	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	Merge branch 'typing'	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	CI: Put mypy into a separate workflow and add some...	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	Introduce ResultType and improve static typing in test_engine.py	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	Improve the VersionCheck static typing	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	Improve typing and drop the unused **kwargs in the...	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	Improve _open() to avoid mypy and pylint warnings	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	CI: Check static typing with mypy during the functional...	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	Style fixes for engine import	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	Use dict instead of OrderedDict	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	Add more typing annotations to test_engine.py	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	Fix mypy typing warnings for ChecklistObjType	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	Add more precise typing for checklist: List[ChecklistObjType]	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	Fix assertion style	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	Fix mypy typing warnings in engine.py	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	Add more typing annotations to engine.py	commit \| commitdiff \| tree
2024-05-13	Alexander Popov	Move print_unknown_options() to engine.py	commit \| commitdiff \| tree
2024-05-12	Alexander Popov	Add more precise typing for OrderedDict	commit \| commitdiff \| tree
2024-05-12	Alexander Popov	Add more typing annotations to checks.py	commit \| commitdiff \| tree
2024-05-12	Alexander Popov	Make the static typing work for Python v3.8	commit \| commitdiff \| tree
2024-05-12	Alexander Popov	Fix mypy typing warnings in __init__.py	commit \| commitdiff \| tree
2024-05-12	Alexander Popov	Add more typing annotations to __init__.py	commit \| commitdiff \| tree
2024-05-12	Alexander Popov	Fix pylint warnings in _open	commit \| commitdiff \| tree
2024-05-12	Alexander Popov	Fix mypy warning in _open()	commit \| commitdiff \| tree
2024-05-12	Alexander Popov	Fix mypy warning in json_dump()	commit \| commitdiff \| tree
2024-05-03	Alexander Popov	CI: Don't run the tests with coverage control for pull...	commit \| commitdiff \| tree
2024-05-02	Alexander Popov	CI: Add a functional test without collecting coverage...	commit \| commitdiff \| tree
2024-05-02	Alexander Popov	CI: Fix the name of engine_unit-test_no_coverage (II)	commit \| commitdiff \| tree
2024-05-02	Alexander Popov	CI: Fix the name of engine_unit-test_no_coverage	commit \| commitdiff \| tree
2024-05-02	Alexander Popov	CI: Add a unit-test without collecting coverage (tired...	commit \| commitdiff \| tree
2024-05-02	Alexander Popov	Merge branch 'skip_sysctl'	commit \| commitdiff \| tree
2024-05-02	Alexander Popov	Style fixes, should be no functional changes	commit \| commitdiff \| tree
2024-05-02	Alexander Popov	Fix the reason and decision of the KEXEC_CORE check	commit \| commitdiff \| tree
2024-05-02	Alexander Popov	Fix the reason and decision of the BPF_JIT check	commit \| commitdiff \| tree
2024-05-02	Alexander Popov	Restore the `dev.tty.legacy_tiocsti` check	commit \| commitdiff \| tree
2024-05-02	Alexander Popov	Use CONFIG_LOCALVERSION instead of CONFIG_DEFAULT_INIT...	commit \| commitdiff \| tree
2024-05-02	Eneas U de Queiroz	skip kernel.modules_disabled if MODULES not set	commit \| commitdiff \| tree
2024-05-02	Eneas U de Queiroz	Skip unprivileged_userfaultfd if USERFAULTFD unset	commit \| commitdiff \| tree
2024-05-02	Eneas U de Queiroz	Don't fail if dev.tty.legacy_tiocsti not found	commit \| commitdiff \| tree
2024-05-02	Eneas U de Queiroz	Skip unprivileged_bpf_disabled if BPF_SYSCALL not set	commit \| commitdiff \| tree
2024-05-02	Eneas U de Queiroz	Skip kexec_load_disabled if KEXEC_CORE is not set	commit \| commitdiff \| tree
2024-05-02	Eneas U de Queiroz	Skip bpf_jit_harden sysctl if BPF_JIT is not set	commit \| commitdiff \| tree
2024-04-30	Alexander Popov	Merge branch 'cpu_depend'	commit \| commitdiff \| tree
2024-04-30	Alexander Popov	Fix the reason and decision for CPU_SUP_INTEL	commit \| commitdiff \| tree
2024-04-30	Alexander Popov	Style fixes	commit \| commitdiff \| tree
2024-04-21	Alexander Popov	Like grep, colorize the output only if stdout is connected...	commit \| commitdiff \| tree
2024-04-21	Alexander Popov	Don't use the `type` name for the class methods	commit \| commitdiff \| tree
2024-04-18	Alexander Popov	Add the BLK_DEV_WRITE_MOUNTED/bdev_allow_write_mounted...	commit \| commitdiff \| tree
2024-04-17	Alexander Popov	CI: codecov-action@v3.1.5 with token doesn't work well...	commit \| commitdiff \| tree
2024-04-17	Alexander Popov	CI: Return to codecov-action@v3.1.5, but with tokens	commit \| commitdiff \| tree
2024-04-17	Alexander Popov	CI: Update python versions	commit \| commitdiff \| tree
2024-04-17	Alexander Popov	Add the links to the corresponding codecov pages in...	commit \| commitdiff \| tree
2024-04-17	Alexander Popov	CI: Move to codecov-action@4	commit \| commitdiff \| tree
2024-04-17	Alexander Popov	CI: Move to codecov-action@v3.1.5	commit \| commitdiff \| tree
2024-04-17	Alexander Popov	Merge branch 'shstk'	commit \| commitdiff \| tree
2024-04-17	Alexander Popov	Fix 'decision' for the X86_USER_SHADOW_STACK check	commit \| commitdiff \| tree
2024-03-30	Alexander Popov	Add a comment that 'user.max_user_namespaces=0' may...	commit \| commitdiff \| tree
2024-03-25	Alexander Popov	Update the README	commit \| commitdiff \| tree
2024-03-25	Alexander Popov	Improve the CONFIG_CFI_CLANG checks (add the CONFIG_CC_IS_CL...	commit \| commitdiff \| tree
2024-03-25	Alexander Popov	Drop the GCC_PLUGINS check (checking CC_IS_GCC is enough)	commit \| commitdiff \| tree
2024-03-25	Alexander Popov	Add the CONFIG_CC_IS_GCC dependency for gcc plugins	commit \| commitdiff \| tree
2024-03-25	Alexander Popov	Don't require GCC_PLUGINS separately	commit \| commitdiff \| tree
2024-03-24	Alexander Popov	Rename the 'my' check decision to 'a13xp0p0v'	commit \| commitdiff \| tree
2024-03-17	Alexander Popov	Make the table column names and JSON field names fit...	commit \| commitdiff \| tree
2024-03-17	Alexander Popov	Merge remote-tracking branch 'krishjainx/improve-json...	commit \| commitdiff \| tree
2024-03-11	Alexander Popov	Improve the DEBUG_CREDENTIALS check	commit \| commitdiff \| tree
next

kconfig-hardened-check

RSS Atom