projects
/
kconfig-hardened-check.git
/ search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅ next
Update README
2019-01-14
Alexander Popov
Update README
commit
|
commitdiff
|
tree
2019-01-14
Alexander Popov
Change the last 'ubuntu18' checks (about lockdown)
commit
|
commitdiff
|
tree
2019-01-14
Alexander Popov
Change 'decision' to 'grsecurity' for their additional...
commit
|
commitdiff
|
tree
2019-01-14
Alexander Popov
Change 'decision' to 'kspp' for non-default options...
commit
|
commitdiff
|
tree
2019-01-14
Alexander Popov
Change 'decision' to 'defconfig' for hardening features...
commit
|
commitdiff
|
tree
2018-12-21
Alexander Popov
Add kernel command line options enabling mitigations...
commit
|
commitdiff
|
tree
2018-12-12
Alexander Popov
Add TODO (hardening preferences for ARM) and update...
commit
|
commitdiff
|
tree
2018-12-12
Alexander Popov
Check x86 hardening features: X86_SMAP and X86_INTEL_UMIP
commit
|
commitdiff
|
tree
2018-12-12
Alexander Popov
Add SECURITY_LOADPIN check
commit
|
commitdiff
|
tree
2018-12-12
Alexander Popov
Add SLAB_MERGE_DEFAULT check
commit
|
commitdiff
|
tree
2018-12-12
Alexander Popov
Mention net.core.bpf_jit_harden
commit
|
commitdiff
|
tree
2018-12-12
Alexander Popov
Recommend slub_debug=FZP
commit
|
commitdiff
|
tree
2018-12-07
Alexander Popov
Mark options connected with CONFIG_LOCK_DOWN_KERNEL...
commit
|
commitdiff
|
tree
2018-12-07
Alexander Popov
Add CONFIG_LOCK_DOWN_KERNEL
commit
|
commitdiff
|
tree
2018-12-05
Alexander Popov
Add a hint about gcc plugins support
commit
|
commitdiff
|
tree
2018-08-08
Alexander Popov
Merge branch 'from-hackurx-3'
commit
|
commitdiff
|
tree
2018-08-08
Alexander Popov
Move kspp-recommendations.config to config_files
commit
|
commitdiff
|
tree
2018-08-08
Alexander Popov
Add missing configs
commit
|
commitdiff
|
tree
2018-08-08
Alexander Popov
Fix links to configs
commit
|
commitdiff
|
tree
2018-08-08
Alexander Popov
Update UEK config
commit
|
commitdiff
|
tree
2018-08-08
Loïc
Add links.txt
commit
|
commitdiff
|
tree
2018-07-30
Alexander Popov
Minor fixes for the script output
commit
|
commitdiff
|
tree
2018-07-30
Alexander Popov
Merge branch 'from-iad42-1'
commit
|
commitdiff
|
tree
2018-07-30
Anatoly Ivanov
get_option_state function now looks a lot prettier...
commit
|
commitdiff
|
tree
2018-07-30
Anatoly Ivanov
Made long lines in major output shorter
commit
|
commitdiff
|
tree
2018-07-30
Alexander Popov
And update README
commit
|
commitdiff
|
tree
2018-07-30
Alexander Popov
Add DEBUG_RODATA as old alternative to STRICT_KERNEL_RWX
commit
|
commitdiff
|
tree
2018-07-30
Alexander Popov
Align lines better
commit
|
commitdiff
|
tree
2018-07-30
Alexander Popov
Add DEBUG_SET_MODULE_RONX as old alternative to STRICT_MODUL...
commit
|
commitdiff
|
tree
2018-07-30
Alexander Popov
Update the README (LKDTM is commented out)
commit
|
commitdiff
|
tree
2018-07-30
Alexander Popov
Update the function names according to the new meaning
commit
|
commitdiff
|
tree
2018-07-27
Alexander Popov
Merge branch 'from-hackurx-2'
commit
|
commitdiff
|
tree
2018-07-27
Loïc
Add debian-stretch.config
commit
|
commitdiff
|
tree
2018-07-27
Loïc
Delete debian-sid-amd64.config
commit
|
commitdiff
|
tree
2018-07-27
Loïc
Delete Archlinux-Testing.config
commit
|
commitdiff
|
tree
2018-07-27
Loïc
Add SLE15.config
commit
|
commitdiff
|
tree
2018-07-27
Alexander Popov
Comment out LKDTM
commit
|
commitdiff
|
tree
2018-07-25
Alexander Popov
Avoid false positive errors if CONFIG_MODULES is not set
commit
|
commitdiff
|
tree
2018-07-25
Alexander Popov
Support both versions of the STACKPROTECTOR_STRONG...
commit
|
commitdiff
|
tree
2018-07-24
Alexander Popov
Merge branch 'OR-from-anthraxx'
commit
|
commitdiff
|
tree
2018-07-24
Alexander Popov
Update the README
commit
|
commitdiff
|
tree
2018-07-24
Alexander Popov
Improve the OR result calculation
commit
|
commitdiff
|
tree
2018-07-24
Alexander Popov
Adjust the output format
commit
|
commitdiff
|
tree
2018-07-24
anthraxx
support DEVMEM not set when considering STRICT_DEVMEM...
commit
|
commitdiff
|
tree
2018-07-24
Alexander Popov
Add the comment describing OR use case
commit
|
commitdiff
|
tree
2018-07-24
Alexander Popov
OR needs OptCheck.check() return values
commit
|
commitdiff
|
tree
2018-07-24
anthraxx
support logical OR operations on options
commit
|
commitdiff
|
tree
2018-07-20
Alexander Popov
Update usage in README.md
commit
|
commitdiff
|
tree
2018-07-20
Alexander Popov
Merge branch 'from-hackurx-1'
commit
|
commitdiff
|
tree
2018-07-20
HacKurx
Add config_files directory
commit
|
commitdiff
|
tree
2018-07-20
Loïc
Add Alpinelinux-edge.config
commit
|
commitdiff
|
tree
2018-07-20
Loïc
Add Archlinux-hardened.config
commit
|
commitdiff
|
tree
2018-07-20
Loïc
Add CONFIG_BINFMT_AOUT to ubuntu18
commit
|
commitdiff
|
tree
2018-07-20
Loïc
Add Archlinux-Testing.config
commit
|
commitdiff
|
tree
2018-07-20
Loïc
Add debian-sid-amd64.config
commit
|
commitdiff
|
tree
2018-07-20
Loïc
Add Grsecurity recommendation on BINFMT_AOUT
commit
|
commitdiff
|
tree
2018-07-20
Alexander Popov
Merge branch 'arch-changes-from-anthraxx'
commit
|
commitdiff
|
tree
2018-07-20
Alexander Popov
Count errors in the end
commit
|
commitdiff
|
tree
2018-07-20
Alexander Popov
Rename 'opt_list' as well
commit
|
commitdiff
|
tree
2018-07-20
anthraxx
rename Opt to better matching OptCheck
commit
|
commitdiff
|
tree
2018-07-20
Alexander Popov
Don't return the result from Opt.check(), we don't...
commit
|
commitdiff
|
tree
2018-07-20
anthraxx
store option check result as class member
commit
|
commitdiff
|
tree
2018-07-20
Alexander Popov
Please forgive me, I fear lambdas :\
commit
|
commitdiff
|
tree
2018-07-20
Alexander Popov
Debug mode output should be printed before the final...
commit
|
commitdiff
|
tree
2018-07-20
Alexander Popov
Fix the output: ERROR, not BUG
commit
|
commitdiff
|
tree
2018-07-20
Alexander Popov
Rename check_state() according the new meaning
commit
|
commitdiff
|
tree
2018-07-20
Alexander Popov
Fix the check against multiple options in config file
commit
|
commitdiff
|
tree
2018-07-20
Alexander Popov
Use None as state of the options which are not found
commit
|
commitdiff
|
tree
2018-07-20
Alexander Popov
Drop assertions which are now useless
commit
|
commitdiff
|
tree
2018-07-20
anthraxx
improve architecture in preparation for new features
commit
|
commitdiff
|
tree
2018-07-13
Alexander Popov
ArgumentParser: drop unneeded default=False for args...
commit
|
commitdiff
|
tree
2018-07-13
Alexander Popov
ArgumentParser: Improve description
commit
|
commitdiff
|
tree
2018-07-13
anthraxx
argparse: using python module instead of manual getopt
commit
|
commitdiff
|
tree
2018-07-05
Alexander Popov
Consider 'not found' as an equivalent of 'is not set'
commit
|
commitdiff
|
tree
2018-07-05
Alexander Popov
Add rules for options disabled by grsecurity
commit
|
commitdiff
|
tree
2018-07-04
Alexander Popov
Move some features to 'cut_attack_surface' category
commit
|
commitdiff
|
tree
2018-07-04
Alexander Popov
More decisions on kernel options
commit
|
commitdiff
|
tree
2018-07-03
Alexander Popov
Add Oracle Unbreakable Enterprise Kernel 5 (UEK-5)...
commit
|
commitdiff
|
tree
2018-06-22
Alexander Popov
Drop CONFIG_DEBUG_KERNEL from kspp-recommendations...
commit
|
commitdiff
|
tree
2018-06-20
Alexander Popov
Disable buggy IP_SCTP to cut attack surface
commit
|
commitdiff
|
tree
2018-06-20
Alexander Popov
Disable only CONFIG_USER_NS, not whole CONFIG_NAMESPACES
Signed-off-by: Alexander Popov <
alex.popov@linux.com
>
commit
|
commitdiff
|
tree
2018-06-20
Alexander Popov
Add kconfig-hardened-check.py
Signed-off-by: Alexander Popov <
alex.popov@linux.com
>
commit
|
commitdiff
|
tree