projects / kconfig-hardened-check.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
Fix the BPF_UNPRIV_DEFAULT_OFF check (it is enabled by default)
2022-03-13 Alexander PopovFix the BPF_UNPRIV_DEFAULT_OFF check (it is enabled...
commit | commitdiff | tree
2022-03-13 Alexander PopovAdd CONFIG_SLS vs CVE-2021-26341 in Straight-Line-Speculation
 commit | commitdiff | tree
2022-03-13 Alexander PopovAdd the comment that l1d_flush is a part of the l1tf...
commit | commitdiff | tree
2022-03-13 Alexander PopovAdd BPF_UNPRIV_DEFAULT_OFF to cut_attack_surface
 commit | commitdiff | tree
2022-03-05 Alexander PopovUse the option type instead of calling hasattr()
 commit | commitdiff | tree
2022-03-05 Alexander PopovMerge branch 'refactoring'
 commit | commitdiff | tree
2022-02-14 Alexander PopovIntroduce the json_dump() class method
 commit | commitdiff | tree
2022-02-14 Alexander PopovImprove 'type' for ComplexOptCheck and PresenceCheck...
commit | commitdiff | tree
2022-02-14 Alexander PopovMake populate_with_data() aware of data type
 commit | commitdiff | tree
2022-02-14 Alexander PopovAdd 'type' for PresenceCheck and VersionCheck
 commit | commitdiff | tree
2022-02-14 Alexander PopovRename VerCheck to VersionCheck
 commit | commitdiff | tree
2022-02-14 Alexander PopovAdd more ComplexOptCheck validation
 commit | commitdiff | tree
2022-02-14 Alexander PopovImprove print_unknown_options()
 commit | commitdiff | tree
2022-02-14 Alexander PopovRemove 'CONFIG_' hardcoding
 commit | commitdiff | tree
2022-02-11 Alexander PopovMerge branch 'refactoring'
 commit | commitdiff | tree
2022-02-11 Alexander PopovRefactor the OR logic code
 commit | commitdiff | tree
2022-02-11 Alexander PopovRename config to kconfig where needed (part II)
 commit | commitdiff | tree
2022-01-22 Alexander PopovExtract populate_with_data() from perform_checks()
 commit | commitdiff | tree
2022-01-22 Alexander PopovRename config to kconfig where needed
 commit | commitdiff | tree
2022-01-22 Alexander PopovPrint the type of a check in the json mode
 commit | commitdiff | tree
2022-01-22 Alexander PopovComplexOptCheck type has the type of the first opt...
commit | commitdiff | tree
2022-01-21 Alexander PopovUpdate the example output in the README (yes, now I...
commit | commitdiff | tree
2022-01-21 Alexander PopovDo more output tuning
 commit | commitdiff | tree
2022-01-21 Alexander PopovUpdate the example output in the README
 commit | commitdiff | tree
2022-01-21 Alexander PopovAdd check type
 commit | commitdiff | tree
2022-01-21 Alexander PopovUpdate the example output in the README
 commit | commitdiff | tree
2022-01-21 Alexander PopovPrint compactly
 commit | commitdiff | tree
2022-01-21 Alexander PopovIntroduce KconfigCheck class
 commit | commitdiff | tree
2022-01-21 Alexander PopovFix TRIM_UNUSED_KSYMS check
 commit | commitdiff | tree
2021-12-24 Alexander PopovAdd l1d_flush (for future reference)
 commit | commitdiff | tree
2021-12-05 Alexander PopovAdd ARM64_PTR_AUTH_KERNEL extracted from ARM64_PTR_AUTH
 commit | commitdiff | tree
2021-11-21 Alexander PopovDocument the output modes specified by the `-m` parameter
 commit | commitdiff | tree
2021-11-21 Alexander PopovTODO: RISC-V
 commit | commitdiff | tree
2021-11-09 Alexander PopovUpdate the README (a lot of new checks appeared)
 commit | commitdiff | tree
2021-11-09 Alexander PopovKeep the old X86_PTDUMP check as a backup
 commit | commitdiff | tree
2021-11-09 Alexander PopovSimplify the check about PTDUMP_DEBUGFS (I was correct)
 commit | commitdiff | tree
2021-11-09 Alexander PopovAdd more checks from grsecurity for cutting attack...
commit | commitdiff | tree
2021-11-09 Alexander PopovFix the 'decision' field of the IO_URING check
 commit | commitdiff | tree
2021-11-09 Alexander PopovAdd more checks from grsecurity for cutting attack...
commit | commitdiff | tree
2021-11-09 Alexander PopovFix the 'decision' field of the KPROBES check
 commit | commitdiff | tree
2021-11-09 Alexander PopovAdd the comment
 commit | commitdiff | tree
2021-09-23 Alexander PopovImprove the README
 commit | commitdiff | tree
2021-09-23 Alexander PopovGet a bit more coverage
 commit | commitdiff | tree
2021-09-23 Alexander PopovUpdate the README
 commit | commitdiff | tree
2021-09-22 Alexander PopovMove 'self_protection' & 'maintainer' higher
 commit | commitdiff | tree
2021-09-21 Alexander PopovAdd HARDENED_USERCOPY_PAGESPAN check from KSPP
 commit | commitdiff | tree
2021-09-21 Alexander PopovAdd comments about the maintainer recommendations
 commit | commitdiff | tree
2021-09-21 Alexander PopovFix UBSAN_BOUNDS recommendations
 commit | commitdiff | tree
2021-09-21 Alexander PopovRANDOMIZE_KSTACK_OFFSET_DEFAULT is recommended by KSPP
 commit | commitdiff | tree
2021-09-16 Alexander PopovUpdate the KSPP recommendations
 commit | commitdiff | tree
2021-09-16 Alexander PopovAdd defconfigs for Linux v5.14
 commit | commitdiff | tree
2021-09-10 Alexander PopovAdd RANDOMIZE_KSTACK_OFFSET_DEFAULT
 commit | commitdiff | tree
2021-08-29 Alexander PopovAdd CFI_CLANG
 commit | commitdiff | tree
2021-08-29 Alexander PopovAdd ARM64_EPAN
 commit | commitdiff | tree
2021-08-14 Alexander PopovAdd hardware tag-based KASAN with arm64 Memory Tagging...
commit | commitdiff | tree
2021-08-14 Alexander PopovAdd the command line parameters that should NOT be set
 commit | commitdiff | tree
2021-08-08 Alexander PopovDocument the changes of vm.unprivileged_userfaultfd...
commit | commitdiff | tree
2021-08-08 Alexander PopovAdd the news about PAGE_POISONING
 commit | commitdiff | tree
2021-07-02 Alexander PopovImprove wording
 commit | commitdiff | tree
2021-06-19 Alexander PopovUpdate the README.
 commit | commitdiff | tree
2021-06-19 Alexander PopovFix pylint warning
 commit | commitdiff | tree
2021-06-19 Alexander PopovRemember that SHADOW_CALL_STACK depends on clang
 commit | commitdiff | tree
2021-06-19 Alexander PopovSTACKPROTECTOR_PER_TASK is also available for ARM64
 commit | commitdiff | tree
2021-06-19 Alexander PopovINTEL_IOMMU_SVM is available only for X86_64
 commit | commitdiff | tree
2021-06-19 Alexander PopovReorder arch checks
 commit | commitdiff | tree
2021-06-19 Alexander PopovSECURITY_DMESG_RESTRICT is recommended by KSPP now
 commit | commitdiff | tree
2021-06-19 Alexander PopovThink about kptr_restrict later (KSPP recommends to...
commit | commitdiff | tree
2021-06-19 Alexander PopovMention that nosmt is slow
 commit | commitdiff | tree
2021-06-19 Alexander PopovMore info on init_on_free and init_on_alloc
 commit | commitdiff | tree
2021-06-19 Alexander PopovSLUB_DEBUG_ON is very slow, leave it for the kernel...
commit | commitdiff | tree
2021-06-19 Alexander PopovUpdate KSPP recommendations
 commit | commitdiff | tree
2021-06-19 Alexander PopovAdd defconfigs for v5.10
 commit | commitdiff | tree
2021-06-19 Alexander PopovHARDEN_BRANCH_PREDICTOR for ARM64 is enabled by default...
commit | commitdiff | tree
2021-06-18 Alexander PopovAdd ARM64_MTE for userspace
 commit | commitdiff | tree
2021-06-18 Alexander PopovMaybe SHADOW_CALL_STACK should be alternative to STACKPROTEC...
commit | commitdiff | tree
2021-06-18 Alexander PopovSave 'debugfs=no-mount' for future
 commit | commitdiff | tree
2020-10-30 Alexander PopovUpdate the README.
 commit | commitdiff | tree
2020-10-30 Alexander PopovFix indentation (thanks to pylint)
 commit | commitdiff | tree
2020-10-29 Alexander PopovAdd a Q&A about spectre-meltdown-checker maintained...
commit | commitdiff | tree
2020-10-23 Alexander PopovINIT_STACK_ALL -> INIT_STACK_ALL_ZERO (was renamed)
 commit | commitdiff | tree
2020-10-23 Alexander PopovAdd SHADOW_CALL_STACK for ARM64
 commit | commitdiff | tree
2020-10-22 Alexander PopovAdd the recommendation about TRIM_UNUSED_KSYMS
 commit | commitdiff | tree
2020-10-22 Alexander PopovAdd ARM64_BTI_KERNEL
 commit | commitdiff | tree
2020-10-22 Alexander PopovAdd the recommendation about UBSAN_BOUNDS
 commit | commitdiff | tree
2020-10-22 Alexander PopovPAGE_POISONING -> PAGE_POISONING_ZERO
 commit | commitdiff | tree
2020-10-22 Alexander PopovImprove AND check reports
 commit | commitdiff | tree
2020-10-22 Alexander PopovImprove HARDEN_EL2_VECTORS check
 commit | commitdiff | tree
2020-10-22 Alexander PopovMerge remote-tracking branch 'pgils/el2_vectors'
 commit | commitdiff | tree
2020-10-21 Alexander PopovAdd nested ComplexOptChecks support
 commit | commitdiff | tree
2020-10-16 Alexander PopovAdd TODO about SLUB_DEBUG_ON
 commit | commitdiff | tree
2020-10-16 Alexander PopovAdd CLIP OS recommendation about EFI_CUSTOM_SSDT_OVERLAYS
 commit | commitdiff | tree
2020-10-16 Alexander PopovDisabling ACPI_TABLE_UPGRADE is now recommended by...
commit | commitdiff | tree
2020-10-16 Alexander PopovWithdraw my recommendation about BPF_JIT
 commit | commitdiff | tree
2020-10-14 Alexander PopovUse cross compiler to build defconfigs
 commit | commitdiff | tree
2020-10-14 Alexander PopovAdd defconfigs for Linux kernel v5.9
 commit | commitdiff | tree
2020-07-15 Alexander PopovUpdate the README
 commit | commitdiff | tree
2020-07-15 Alexander PopovFix relevant pylint warnings
 commit | commitdiff | tree
2020-07-15 Alexander PopovFix 'decision' priority order ('lockdown' vs 'clipos...
commit | commitdiff | tree
2020-07-15 Alexander PopovAdd CLIP OS recommendations about CONFIG_IO_URING and...
commit | commitdiff | tree
2020-07-15 Alexander PopovAdd CONFIG_EFI_DISABLE_PCI_DMA recommended by CLIP OS
 commit | commitdiff | tree
next
kconfig-hardened-check