projects
/
kconfig-hardened-check.git
/ search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first
⋅
prev
⋅
next
CI: Add a functional test without collecting coverage (tired of codecov failures)
2020-07-15
Alexander Popov
Improve ComplexOptCheck use cases
commit
|
commitdiff
|
tree
2020-07-15
Alexander Popov
Add 'show_ok' and 'show_fail' print modes
commit
|
commitdiff
|
tree
2020-07-13
Alexander Popov
Declare variables closer to their usage
commit
|
commitdiff
|
tree
2020-07-13
Alexander Popov
Get rid of 'kernel_version' global variable
commit
|
commitdiff
|
tree
2020-07-13
Alexander Popov
Big rework of the report modes
commit
|
commitdiff
|
tree
2020-07-13
Alexander Popov
Add another link about user namespaces to Q&A
commit
|
commitdiff
|
tree
2020-07-10
Alexander Popov
Add ARM64_PAN
commit
|
commitdiff
|
tree
2020-07-09
Alexander Popov
Use += instead of append() for checklist
commit
|
commitdiff
|
tree
2020-07-09
Alexander Popov
Reorder some checking rules for better looking code
commit
|
commitdiff
|
tree
2020-07-09
Alexander Popov
Change the order of arguments in OptCheck constructor
commit
|
commitdiff
|
tree
2020-07-09
Alexander Popov
Drop unused 'state' property from ComplexOptCheck
commit
|
commitdiff
|
tree
2020-07-09
Alexander Popov
Don't return self.result in check() method -- it's...
commit
|
commitdiff
|
tree
2020-07-06
Alexander Popov
ARM64_PTR_AUTH is now supported for the kernel (from...
commit
|
commitdiff
|
tree
2020-07-03
Alexander Popov
Add the link to huldufolk project by @tych0
commit
|
commitdiff
|
tree
2020-05-06
Alexander Popov
Merge branch 'ubuntu20'
commit
|
commitdiff
|
tree
2020-04-09
Alexander Popov
Merge branch 'evbug'
commit
|
commitdiff
|
tree
2020-04-09
Alexander Popov
Merge branch 'pylint'
commit
|
commitdiff
|
tree
2020-04-06
Alexander Popov
Improve versioning
commit
|
commitdiff
|
tree
2020-04-03
Alexander Popov
Add DRM_LEGACY, FB, and VT checks
commit
|
commitdiff
|
tree
2020-03-31
Alexander Popov
Implement PresenceCheck and use it for LDISC_AUTOLOAD
commit
|
commitdiff
|
tree
2020-03-31
Alexander Popov
Fix ComplexOptCheck result printing
commit
|
commitdiff
|
tree
2020-03-31
Alexander Popov
Newline should be printed by print_checklist() that...
commit
|
commitdiff
|
tree
2020-03-31
Alexander Popov
Add more tests to increase coverage - IV
commit
|
commitdiff
|
tree
2020-03-31
Alexander Popov
Create polymorphism for printing, add table_print(...
commit
|
commitdiff
|
tree
2020-03-31
Alexander Popov
Revisit special behavior in checking and printing that...
commit
|
commitdiff
|
tree
2020-03-31
Alexander Popov
Rename some workflow steps
commit
|
commitdiff
|
tree
2020-03-30
Alexander Popov
Add more tests to increase coverage - III
commit
|
commitdiff
|
tree
2020-03-30
Alexander Popov
Add more tests to increase coverage - II
commit
|
commitdiff
|
tree
2020-03-30
Alexander Popov
Add more tests to increase coverage - I
commit
|
commitdiff
|
tree
2020-03-30
Alexander Popov
Collect coverage
commit
|
commitdiff
|
tree
2020-03-30
Alexander Popov
Count checked configs
commit
|
commitdiff
|
tree
2020-03-30
Alexander Popov
Check all configs automatically
commit
|
commitdiff
|
tree
2020-03-30
Alexander Popov
Revisit return values
commit
|
commitdiff
|
tree
2020-03-30
Alexander Popov
Create the github workflow for functional tests
commit
|
commitdiff
|
tree
2020-03-28
Alexander Popov
Fix the shebang to allow `./get-nix-kconfig.py`
commit
|
commitdiff
|
tree
2020-03-27
Alexander Popov
Add NixOS hardened kernel config
commit
|
commitdiff
|
tree
2020-03-26
Alexander Popov
Fix typo in README
commit
|
commitdiff
|
tree
2020-03-26
Alexander Popov
Add vim swp files to gitignore
commit
|
commitdiff
|
tree
2020-03-26
Alexander Popov
Merge branch 'nix'
commit
|
commitdiff
|
tree
2020-03-26
Alexander Popov
Update the README (describing installation)
commit
|
commitdiff
|
tree
2020-03-26
Alexander Popov
Add a wrapper for using the tool without installation...
commit
|
commitdiff
|
tree
2020-03-26
Alexander Popov
Enable distribution via pip/setuptools
commit
|
commitdiff
|
tree
2020-03-26
Alexander Popov
Call it a tool
commit
|
commitdiff
|
tree
2020-03-26
Alexander Popov
Uh, setuptools doesn't like package names that contain...
commit
|
commitdiff
|
tree
2020-03-25
Alexander Popov
Add main() and clean up working with globals
commit
|
commitdiff
|
tree
2020-03-25
Alexander Popov
Rename to kconfig-hardened-check/__init__.py
commit
|
commitdiff
|
tree
2020-03-25
Alexander Popov
Move files to kconfig-hardened-check folder
commit
|
commitdiff
|
tree
2020-03-25
Alexander Popov
Rename LICENSE file
commit
|
commitdiff
|
tree
2020-03-24
Alexander Popov
Version 0.5.5 (supports Linux kernel v5.5)
commit
|
commitdiff
|
tree
2020-03-24
Alexander Popov
Update the README
commit
|
commitdiff
|
tree
2020-03-24
Alexander Popov
CLIP OS recommends disabling Intel TSX
commit
|
commitdiff
|
tree
2020-03-24
Alexander Popov
Small syctl cleanup
commit
|
commitdiff
|
tree
2020-03-20
Alexander Popov
CopperheadOS disables the kernel's CONFIG_AIO feature
commit
|
commitdiff
|
tree
2020-03-20
Alexander Popov
KSPP now recommends PAGE_TABLE_ISOLATION for X86_32
commit
|
commitdiff
|
tree
2020-03-20
Alexander Popov
Update KSPP recommendations
commit
|
commitdiff
|
tree
2020-03-18
Alexander Popov
INTEL_IOMMU is available for X86_32
commit
|
commitdiff
|
tree
2020-03-18
Alexander Popov
Move VMSPLIT_3G to 'userspace_hardening'
commit
|
commitdiff
|
tree
2020-03-18
Alexander Popov
Style fix
commit
|
commitdiff
|
tree
2020-03-18
Alexander Popov
IOMMU_SUPPORT is needed for all architectures
commit
|
commitdiff
|
tree
2020-03-18
Alexander Popov
SECURITY_WRITABLE_HOOKS and SECURITY_SELINUX_DISABLE...
commit
|
commitdiff
|
tree
2020-03-18
Alexander Popov
Add CLIP OS recommendation about X86_CPUID
commit
|
commitdiff
|
tree
2020-03-18
Alexander Popov
Fix RANDOM_TRUST_BOOTLOADER check
commit
|
commitdiff
|
tree
2020-03-18
Alexander Popov
LOCKDOWN update - part II
commit
|
commitdiff
|
tree
2020-03-18
Alexander Popov
LOCKDOWN update - part I
commit
|
commitdiff
|
tree
2020-03-18
Alexander Popov
Don't restrict arch for "is not set" checks
commit
|
commitdiff
|
tree
2020-03-17
Alexander Popov
SECURITY_LOCKDOWN_LSM is recommended by CLIP OS
commit
|
commitdiff
|
tree
2020-03-08
Alexander Popov
Add CONFIG_INTEGRITY for userspace hardening
commit
|
commitdiff
|
tree
2020-03-08
Alexander Popov
Fix the comments
commit
|
commitdiff
|
tree
2020-03-08
Alexander Popov
Don't show all checks from all supported platforms...
commit
|
commitdiff
|
tree
2020-03-07
Alexander Popov
Improve 'dunno' report in debug_mode
commit
|
commitdiff
|
tree
2020-03-06
Alexander Popov
Add SECURITY_LOADPIN_ENFORCE check
commit
|
commitdiff
|
tree
2020-03-06
Alexander Popov
Update CLIP OS kernel security documentation
commit
|
commitdiff
|
tree
2020-03-06
Alexander Popov
Add CLIP OS recommendation about CONFIG_STAGING
commit
|
commitdiff
|
tree
2020-03-06
Alexander Popov
Add CLIP OS recommendation about CONFIG_RANDOM_TRUST_BOOTLOADER
commit
|
commitdiff
|
tree
2020-03-06
Alexander Popov
Update the README
commit
|
commitdiff
|
tree
2020-03-06
Alexander Popov
Improve debug_mode a lot
commit
|
commitdiff
|
tree
2020-03-06
Alexander Popov
Improve the table header
commit
|
commitdiff
|
tree
2020-03-06
Alexander Popov
Drop unused OptCheck printing
commit
|
commitdiff
|
tree
2020-03-05
Alexander Popov
Update 'decision' for new KSPP recommendations
commit
|
commitdiff
|
tree
2020-03-05
Alexander Popov
Update KSPP recommendations
commit
|
commitdiff
|
tree
2020-03-05
Alexander Popov
Update the README
commit
|
commitdiff
|
tree
2020-03-05
Alexander Popov
LDISC_AUTOLOAD can be disabled since v5.1
commit
|
commitdiff
|
tree
2020-03-05
Alexander Popov
REFCOUNT_FULL is enabled by default since v5.5
commit
|
commitdiff
|
tree
2020-03-05
Alexander Popov
Add kernel version checks for complex checks with logical...
commit
|
commitdiff
|
tree
2020-03-05
Alexander Popov
Add kernel version detection
commit
|
commitdiff
|
tree
2020-03-05
Alexander Popov
Simplify perform_checks()
commit
|
commitdiff
|
tree
2020-03-04
Alexander Popov
Fix versions in KSPP recommendations
commit
|
commitdiff
|
tree
2020-03-04
Alexander Popov
Fix the name for ClearLinux config
commit
|
commitdiff
|
tree
2020-03-04
Alexander Popov
STACKPROTECTOR_PER_TASK is now default for ARM
commit
|
commitdiff
|
tree
2020-03-04
Alexander Popov
SECURITY_WRITABLE_HOOKS is not disabled by default
commit
|
commitdiff
|
tree
2020-03-04
Alexander Popov
Include GCC_PLUGINS to defconfig
commit
|
commitdiff
|
tree
2020-03-04
Alexander Popov
Update defconfigs (v5.5)
commit
|
commitdiff
|
tree
2020-02-27
Alexander Popov
Merge branch 'config-updates-from-hackurx'
commit
|
commitdiff
|
tree
2020-01-14
Alexander Popov
Fix INIT_ON_FREE_DEFAULT_ON vs PAGE_POISONING issue #28
commit
|
commitdiff
|
tree
2020-01-14
Alexander Popov
Answer the question about CONFIG_PANIC_ON_OOPS
commit
|
commitdiff
|
tree
2020-01-11
Alexander Popov
Recommend disabling VIDEO_VIVID
commit
|
commitdiff
|
tree
2020-01-10
Alexander Popov
Take some ideas from NixOS/nixpkgs hardened kernel...
commit
|
commitdiff
|
tree
2019-12-02
Alexander Popov
Pretty printing
commit
|
commitdiff
|
tree
2019-11-29
Alexander Popov
Version 0.5.3 (supports Linux kernel v5.3)
commit
|
commitdiff
|
tree
2019-11-29
Alexander Popov
Add the link to Linux Kernel Defence Map
commit
|
commitdiff
|
tree
next