jxself.org public git repositories - kconfig-hardened-check.git/search

projects / kconfig-hardened-check.git / search

2023-10-17	Alexander Popov	hardened_usercopy=1 is now officially recommended by...	commit \| commitdiff \| tree
2023-10-16	Alexander Popov	Enabling page_alloc.shuffle is now recommended by KSPP	commit \| commitdiff \| tree
2023-10-16	Alexander Popov	'mitigations=auto,nosmt' is now recommended by KSPP	commit \| commitdiff \| tree
2023-10-16	Alexander Popov	Disabling X86_VSYSCALL_EMULATION is now recommended...	commit \| commitdiff \| tree
2023-10-04	Alexander Popov	Drop ZERO_CALL_USED_REGS in favour of backward-edge CFI	commit \| commitdiff \| tree
2023-09-18	Alexander Popov	Update the README	commit \| commitdiff \| tree
2023-09-18	Alexander Popov	Refactor the assertion in colorize_result() to improve...	commit \| commitdiff \| tree
2023-09-17	Alexander Popov	Update the backup in issues.md	commit \| commitdiff \| tree
2023-09-17	Alexander Popov	Renaming fixes	commit \| commitdiff \| tree
2023-09-17	Alexander Popov	Drop default.nix (it contains a wrong utility name...	commit \| commitdiff \| tree
2023-09-17	Alexander Popov	kconfig-hardened-check -> kernel-hardening-checker	commit \| commitdiff \| tree
2023-09-17	Alexander Popov	test_engine: add test_complex_nested()	commit \| commitdiff \| tree
2023-09-17	Alexander Popov	test_engine: improve the output	commit \| commitdiff \| tree
2023-09-16	Alexander Popov	test_engine: improve the test_stdout()	commit \| commitdiff \| tree
2023-09-16	Alexander Popov	test_engine: refactor test_complex_or() and test_complex_and()	commit \| commitdiff \| tree
2023-09-13	Alexander Popov	Don't remove ANSI colors, adapt the testcases instead	commit \| commitdiff \| tree
2023-09-03	Alexander Popov	Fix arch conditions for some CmdlineChecks	commit \| commitdiff \| tree
2023-08-28	Alexander Popov	Make the functional tests more informative	commit \| commitdiff \| tree
2023-08-28	Alexander Popov	Test more wrong combinations of options	commit \| commitdiff \| tree
2023-08-28	Alexander Popov	Test checking sysctl separately	commit \| commitdiff \| tree
2023-08-27	Alexander Popov	Support separate sysctl checking (without kconfig)	commit \| commitdiff \| tree
2023-08-14	Alexander Popov	Improve coverage of the functional test a bit	commit \| commitdiff \| tree
2023-08-14	Alexander Popov	Clean .gitignore	commit \| commitdiff \| tree
2023-08-14	Alexander Popov	Show git information in the functional test	commit \| commitdiff \| tree
2023-08-14	Alexander Popov	Test an invalid sysctl file	commit \| commitdiff \| tree
2023-08-14	Alexander Popov	Test an unexpected line in the sysctl file	commit \| commitdiff \| tree
2023-08-14	Alexander Popov	Test an unexpected line in the Kconfig file	commit \| commitdiff \| tree
2023-08-14	Alexander Popov	Drop `if __name__ == "__main__"` from ./bin/kconfig...	commit \| commitdiff \| tree
2023-08-14	Alexander Popov	Turn the warning about unexpected line in Kconfig file...	commit \| commitdiff \| tree
2023-08-14	Alexander Popov	Update the README (add the --sysctl mode)	commit \| commitdiff \| tree
2023-08-13	Alexander Popov	Add the Kconfig file of Fedora 38	commit \| commitdiff \| tree
2023-08-13	Alexander Popov	Use example_sysctls.txt in the functional test	commit \| commitdiff \| tree
2023-08-13	Alexander Popov	Add an example sysctl output file	commit \| commitdiff \| tree
2023-08-13	Alexander Popov	Add the / symbol to the sysctl parsing pattern	commit \| commitdiff \| tree
2023-08-13	Alexander Popov	Add --sysctl to functional testing	commit \| commitdiff \| tree
2023-08-13	Alexander Popov	Improve checking the combinations of flags in the functional...	commit \| commitdiff \| tree
2023-08-13	Alexander Popov	Fix syntax to run on the Woodpecker 1.0.0 CI (part II)	commit \| commitdiff \| tree
2023-08-13	Alexander Popov	Fix syntax to run on the Woodpecker 1.0.0 CI	commit \| commitdiff \| tree
2023-08-13	Alexander Popov	Report that --print and --generate can't be used together	commit \| commitdiff \| tree
2023-08-13	Alexander Popov	Enable sysctl checking	commit \| commitdiff \| tree
2023-07-23	Alexander Popov	Check the kernel.unprivileged_bpf_disabled sysctl	commit \| commitdiff \| tree
2023-07-23	Alexander Popov	Check the dev.tty.ldisc_autoload sysctl	commit \| commitdiff \| tree
2023-07-23	Alexander Popov	Check the user.max_user_namespaces sysctl	commit \| commitdiff \| tree
2023-07-23	Alexander Popov	Check the kernel.kexec_load_disabled sysctl	commit \| commitdiff \| tree
2023-07-23	Alexander Popov	Check the kernel.perf_event_paranoid sysctl	commit \| commitdiff \| tree
2023-07-23	Alexander Popov	Check the kernel.dmesg_restrict sysctl	commit \| commitdiff \| tree
2023-07-23	Alexander Popov	Check the net.core.bpf_jit_harden sysctl	commit \| commitdiff \| tree
2023-07-23	Alexander Popov	test_engine: use SysctlCheck in test_value_overriding()	commit \| commitdiff \| tree
2023-07-23	Alexander Popov	test_engine: use SysctlCheck in test_stdout()	commit \| commitdiff \| tree
2023-07-23	Alexander Popov	test_engine: implement test_simple_sysctl()	commit \| commitdiff \| tree
2023-07-23	Alexander Popov	test_engine: support SysctlCheck	commit \| commitdiff \| tree
2023-07-22	Alexander Popov	Refactor populate_opt_with_data()	commit \| commitdiff \| tree
2023-07-16	Alexander Popov	Mute warnings in the JSON mode and improve wording	commit \| commitdiff \| tree
2023-07-16	Alexander Popov	Implement parse_sysctl_file()	commit \| commitdiff \| tree
2023-07-15	Alexander Popov	Drop an obsolete error handling test	commit \| commitdiff \| tree
2023-07-15	Alexander Popov	Fix the bug in the functional tests	commit \| commitdiff \| tree
2023-07-15	Alexander Popov	Emit WARNING for the cmdline options that exist multiple...	commit \| commitdiff \| tree
2023-07-15	Alexander Popov	Precise the Kconfig parsing	commit \| commitdiff \| tree
2023-07-12	Alexander Popov	Get rid of useless regular expressions in detect_compiler()	commit \| commitdiff \| tree
2023-07-12	Alexander Popov	Precise the regular expressions in detect_arch() and...	commit \| commitdiff \| tree
2023-07-12	Alexander Popov	Show error if some cmdline option exists multiple times	commit \| commitdiff \| tree
2023-07-08	Alexander Popov	Add the basic infrastructure for checking sysctl	commit \| commitdiff \| tree
2023-07-08	Alexander Popov	Introduce the SysctlCheck class	commit \| commitdiff \| tree
2023-07-04	Alexander Popov	Check disabling XFS_SUPPORT_V4 for cutting attack surface	commit \| commitdiff \| tree
2023-07-02	Alexander Popov	Print the microarchitecture in --generate mode	commit \| commitdiff \| tree
2023-06-25	Alexander Popov	Update the README	commit \| commitdiff \| tree
2023-06-25	Alexander Popov	Add the info about /proc/cmdline to the usage help	commit \| commitdiff \| tree
2023-06-18	Alexander Popov	setup: fix "The license_file parameter is deprecated"	commit \| commitdiff \| tree
2023-06-18	Alexander Popov	setup: Don't use the automatic "find_namespace:" discovery	commit \| commitdiff \| tree
2023-06-18	Alexander Popov	setup: Fix the warning "Package would be ignored"	commit \| commitdiff \| tree
2023-06-18	Alexander Popov	setup: Drop obsolete zip_safe flag	commit \| commitdiff \| tree
2023-06-17	Alexander Popov	Move the draft of the security hardening sysctls to...	commit \| commitdiff \| tree
2023-06-17	Alexander Popov	Improve normalize_cmdline_options()	commit \| commitdiff \| tree
2023-06-12	Alexander Popov	GitHub Actions: decrease the max-parallel to 1 to avoid...	commit \| commitdiff \| tree
2023-06-12	Alexander Popov	Add functional tests for --generate	commit \| commitdiff \| tree
2023-06-12	Alexander Popov	Update the README	commit \| commitdiff \| tree
2023-06-12	Alexander Popov	Add a new feature --generate	commit \| commitdiff \| tree
2023-06-12	Alexander Popov	Refactoring of the argument parsing	commit \| commitdiff \| tree
2023-06-12	Alexander Popov	Improve the comments and README (part II)	commit \| commitdiff \| tree
2023-06-12	Alexander Popov	Skip normalize_cmdline_options() for the vdso32 and...	commit \| commitdiff \| tree
2023-06-12	Alexander Popov	Skip normalize_cmdline_options() for the vsyscall cmdline...	commit \| commitdiff \| tree
2023-06-12	Alexander Popov	Skip normalize_cmdline_options() for the iommu cmdline...	commit \| commitdiff \| tree
2023-06-12	Alexander Popov	Skip normalize_cmdline_options() for the slub_debug...	commit \| commitdiff \| tree
2023-06-12	Alexander Popov	Improve the comments and README	commit \| commitdiff \| tree
2023-06-05	Alexander Popov	Skip normalize_cmdline_options() for the rodata cmdline...	commit \| commitdiff \| tree
2023-06-05	Alexander Popov	Skip normalize_cmdline_options() for the ssbd cmdline...	commit \| commitdiff \| tree
2023-05-28	Alexander Popov	Add a comment about cfi boot parameter	commit \| commitdiff \| tree
2023-05-28	Alexander Popov	Add the X86_KERNEL_IBT check	commit \| commitdiff \| tree
2023-05-28	Alexander Popov	Add a comment about `kernel.oops_limit` and `kernel...	commit \| commitdiff \| tree
2023-05-27	Alexander Popov	Add a comment about `kernel.unprivileged_userns_clone...	commit \| commitdiff \| tree
2023-05-27	Alexander Popov	Add the comments about HARDENED_USERCOPY features	commit \| commitdiff \| tree
2023-05-09	Alexander Popov	Fix CI output style and move `pip install coverage...	commit \| commitdiff \| tree
2023-05-08	Alexander Popov	Use .github/workflows/functional_test.sh in GitHub...	commit \| commitdiff \| tree
2023-05-08	Alexander Popov	Run the functional tests and collect the coverage in...	commit \| commitdiff \| tree
2023-05-08	Alexander Popov	Check all configs with the installed tool the functional...	commit \| commitdiff \| tree
2023-05-08	Alexander Popov	Test the package installation in the functional test...	commit \| commitdiff \| tree
2023-05-07	Alexander Popov	Run the engine unit-test in Woodpecker-CI	commit \| commitdiff \| tree
2023-05-07	Alexander Popov	Create multiple pipelines for Woodpecker-CI at Codeberg	commit \| commitdiff \| tree
2023-05-07	Alexander Popov	Create a configuration template for Codeberg CI (.woodpecker...	commit \| commitdiff \| tree
2023-05-01	Alexander Popov	Add the checks for vdso32 and vdso on X86_64 and X86_32	commit \| commitdiff \| tree
next

kconfig-hardened-check

RSS Atom