projects / kconfig-hardened-check.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
Improve the STACKPROTECTOR check
2022-07-21 Alexander PopovImprove the STACKPROTECTOR check
 commit | commitdiff | tree
2022-07-21 Alexander PopovDon't mention LKDTM
 commit | commitdiff | tree
2022-07-17 Alexander PopovAdd info about the LKDDb project by @cateee
 commit | commitdiff | tree
2022-07-17 Alexander PopovCheck ARM64_BTI for userspace hardening
 commit | commitdiff | tree
2022-07-17 Alexander PopovCheck ARM64_PTR_AUTH for userspace hardening
 commit | commitdiff | tree
2022-07-17 Alexander PopovAdd rodata check for ARM64
 commit | commitdiff | tree
2022-07-11 Alexander PopovAdd iommu.passthrough check
 commit | commitdiff | tree
2022-07-11 Alexander PopovAdd IOMMU_DEFAULT_PASSTHROUGH check
 commit | commitdiff | tree
2022-07-11 Alexander PopovAdd iommu.strict check
 commit | commitdiff | tree
2022-07-11 Alexander PopovAdd vsyscall check
 commit | commitdiff | tree
2022-07-09 Alexander PopovDon't add CmdlineChecks in add_kconfig_checks() to...
commit | commitdiff | tree
2022-07-09 Alexander PopovAdd slub_debug check
 commit | commitdiff | tree
2022-07-08 Alexander PopovAdd the release badge
 commit | commitdiff | tree
2022-06-20 Alexander PopovAdd the init_on_free check
 commit | commitdiff | tree
2022-06-20 Alexander PopovAdd the page_poison check required for PAGE_POISONING_ZERO
 commit | commitdiff | tree
2022-06-20 Alexander PopovRewrite the slab_nomerge check
 commit | commitdiff | tree
2022-06-20 Alexander PopovRewrite the randomize_kstack_offset check
 commit | commitdiff | tree
2022-06-19 Alexander PopovCheck that a kconfig option value is sane
 commit | commitdiff | tree
2022-06-19 Alexander PopovAdd a tricky check for init_on_alloc and INIT_ON_ALLOC_DEFAU...
commit | commitdiff | tree
2022-06-19 Alexander PopovMove the add_cmdline_checks() call earlier
 commit | commitdiff | tree
2022-06-08 Alexander PopovDon't check __name__ in __init__.py (it can't run separately...
commit | commitdiff | tree
2022-06-08 Alexander PopovFix the pylint warning about isinstance
 commit | commitdiff | tree
2022-06-08 Alexander PopovDrop unneeded properties of ComplexOptCheck
 commit | commitdiff | tree
2022-06-08 Alexander PopovTurn some error conditions into assertions (part 4)
 commit | commitdiff | tree
2022-06-08 Alexander PopovTurn some error conditions into assertions (part 3)
 commit | commitdiff | tree
2022-06-08 Alexander PopovTurn some error conditions into assertions (part 2)
 commit | commitdiff | tree
2022-06-08 Alexander PopovTurn some error conditions into assertions (part 1)
 commit | commitdiff | tree
2022-06-08 Alexander PopovDrop useless checks, the ComplexOptCheck constructor...
commit | commitdiff | tree
2022-06-08 Alexander Popovgithub actions: Test error handling (part 2)
 commit | commitdiff | tree
2022-06-08 Alexander Popovgithub actions: Test error handling (part 1)
 commit | commitdiff | tree
2022-05-30 Alexander Popovgithub actions: Collect coverage for error handling...
commit | commitdiff | tree
2022-05-30 Alexander Popovgithub actions: upgrade to codecov-action@v2
 commit | commitdiff | tree
2022-05-30 Alexander PopovCheck that --config and --print are not used together
 commit | commitdiff | tree
2022-05-30 Alexander Popovgithub actions: Collect coverage for cmdline checking
 commit | commitdiff | tree
2022-05-30 Alexander Popovgithub actions: Improve the descriptions
 commit | commitdiff | tree
2022-05-30 Alexander Popovgithub actions: Improve the test output
 commit | commitdiff | tree
2022-05-30 Alexander PopovDrop dash-separated values from setup.cfg
 commit | commitdiff | tree
2022-05-30 Alexander Popovgithub actions: Add testing with python 3.9
 commit | commitdiff | tree
2022-05-28 Alexander PopovMerge branch 'cmdline'
 commit | commitdiff | tree
2022-05-28 Alexander PopovChange the example output in README
 commit | commitdiff | tree
2022-05-28 Alexander PopovDescribe the cmdline checking support in README
 commit | commitdiff | tree
2022-05-28 Alexander PopovAdd the example config of Fedora 34
 commit | commitdiff | tree
2022-05-28 Alexander PopovCheck the pti cmdline parameter
 commit | commitdiff | tree
2022-05-28 Alexander PopovCheck the slab_nomerge cmdline parameter
 commit | commitdiff | tree
2022-05-28 Alexander PopovCheck the randomize_kstack_offset cmdline parameter
 commit | commitdiff | tree
2022-05-28 Alexander PopovAdd cmdline file parsing
 commit | commitdiff | tree
2022-05-28 Alexander PopovAdd the infrastructure for cmdline checks
 commit | commitdiff | tree
2022-05-28 Alexander PopovAdd '--cmdline' argument for the tool
 commit | commitdiff | tree
2022-05-28 Alexander PopovAdd cmdline checks to '--print'
 commit | commitdiff | tree
2022-05-28 Alexander PopovAdd the CmdlineCheck class
 commit | commitdiff | tree
2022-05-15 Alexander PopovAdd the comment about sysrq_always_enabled
 commit | commitdiff | tree
2022-05-15 Alexander PopovAdd the comment about rodata
 commit | commitdiff | tree
2022-05-08 Alexander PopovUpdate direct feedback from Linux kernel maintainers...
commit | commitdiff | tree
2022-05-06 Alexander PopovAdd the comment about arm64.nomte
 commit | commitdiff | tree
2022-05-06 Alexander PopovAdd the comment about kernel.randomize_va_space
 commit | commitdiff | tree
2022-05-06 Alexander PopovAdd the KGDB check
 commit | commitdiff | tree
2022-05-06 Alexander PopovAdd RANDOMIZE_MODULE_REGION_FULL for arm64
 commit | commitdiff | tree
2022-04-28 Alexander PopovUpdate the README
 commit | commitdiff | tree
2022-04-28 Alexander PopovAdd the type property for OptCheck to fix a pylint...
commit | commitdiff | tree
2022-04-22 Alexander PopovAdd the STACKPROTECTOR check from KSPP
 commit | commitdiff | tree
2022-04-22 Alexander PopovDrop the ARM64_MTE check for userspace hardening
 commit | commitdiff | tree
2022-04-22 Alexander PopovSeparate out checking SECURITY_WRITABLE_HOOKS and SECURITY_S...
commit | commitdiff | tree
2022-04-22 Alexander PopovFix the arch condition for the SCHED_CORE check
 commit | commitdiff | tree
2022-04-22 Alexander PopovAdd the KSPP recommendation of ZERO_CALL_USED_REGS
 commit | commitdiff | tree
2022-04-22 Alexander PopovDisabling X86_MSR is recommended by KSPP
 commit | commitdiff | tree
2022-04-20 Alexander PopovFix the bug in the verdict description for ComplexOptCheck
 commit | commitdiff | tree
2022-04-20 Alexander PopovAdditional check for TYPES_OF_CHECKS
 commit | commitdiff | tree
2022-04-20 Alexander PopovDrop PresenceCheck; OptCheck without 'expected' parameter...
commit | commitdiff | tree
2022-04-20 Alexander PopovUpdate the KSPP recommendations in the config_files
 commit | commitdiff | tree
2022-04-20 Alexander PopovAdd the KSPP recommendation of SCHED_CORE
 commit | commitdiff | tree
2022-04-20 Alexander PopovAdd the KSPP recommendation of IOMMU_DEFAULT_DMA_STRICT
 commit | commitdiff | tree
2022-04-20 Alexander PopovAdd the KSPP recommendation of WERROR
 commit | commitdiff | tree
2022-04-20 Alexander PopovAdd the KSPP recommendation of KFENCE
 commit | commitdiff | tree
2022-04-08 Alexander PopovNo need in BPF_UNPRIV_DEFAULT_OFF if BPF_SYSCALL is...
commit | commitdiff | tree
2022-04-08 Alexander PopovMerge branch 'from-martin-rowe'
 commit | commitdiff | tree
2022-04-07 Alexander PopovAdd defconfigs for Linux v5.17
 commit | commitdiff | tree
2022-03-28 Alexander PopovDrop unneeded return values (refactoring)
 commit | commitdiff | tree
2022-03-20 Alexander PopovAdd HARDEN_BRANCH_HISTORY for arm
 commit | commitdiff | tree
2022-03-20 Alexander PopovAdd MITIGATE_SPECTRE_BRANCH_HISTORY for arm64
 commit | commitdiff | tree
2022-03-18 Alexander PopovTHREAD_INFO_IN_TASK is available for ARM since v5.16
 commit | commitdiff | tree
2022-03-18 Alexander PopovMerge branch 'from-martin-rowe'
 commit | commitdiff | tree
2022-03-13 Alexander PopovFix the BPF_UNPRIV_DEFAULT_OFF check (it is enabled...
commit | commitdiff | tree
2022-03-13 Alexander PopovAdd CONFIG_SLS vs CVE-2021-26341 in Straight-Line-Speculation
 commit | commitdiff | tree
2022-03-13 Alexander PopovAdd the comment that l1d_flush is a part of the l1tf...
commit | commitdiff | tree
2022-03-13 Alexander PopovAdd BPF_UNPRIV_DEFAULT_OFF to cut_attack_surface
 commit | commitdiff | tree
2022-03-05 Alexander PopovUse the option type instead of calling hasattr()
 commit | commitdiff | tree
2022-03-05 Alexander PopovMerge branch 'refactoring'
 commit | commitdiff | tree
2022-02-14 Alexander PopovIntroduce the json_dump() class method
 commit | commitdiff | tree
2022-02-14 Alexander PopovImprove 'type' for ComplexOptCheck and PresenceCheck...
commit | commitdiff | tree
2022-02-14 Alexander PopovMake populate_with_data() aware of data type
 commit | commitdiff | tree
2022-02-14 Alexander PopovAdd 'type' for PresenceCheck and VersionCheck
 commit | commitdiff | tree
2022-02-14 Alexander PopovRename VerCheck to VersionCheck
 commit | commitdiff | tree
2022-02-14 Alexander PopovAdd more ComplexOptCheck validation
 commit | commitdiff | tree
2022-02-14 Alexander PopovImprove print_unknown_options()
 commit | commitdiff | tree
2022-02-14 Alexander PopovRemove 'CONFIG_' hardcoding
 commit | commitdiff | tree
2022-02-11 Alexander PopovMerge branch 'refactoring'
 commit | commitdiff | tree
2022-02-11 Alexander PopovRefactor the OR logic code
 commit | commitdiff | tree
2022-02-11 Alexander PopovRename config to kconfig where needed (part II)
 commit | commitdiff | tree
2022-01-22 Alexander PopovExtract populate_with_data() from perform_checks()
 commit | commitdiff | tree
2022-01-22 Alexander PopovRename config to kconfig where needed
 commit | commitdiff | tree
next
kconfig-hardened-check