projects / kconfig-hardened-check.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
Add kernel version checks for complex checks with logical operations
2020-03-05 Alexander PopovAdd kernel version checks for complex checks with logical...
commit | commitdiff | tree
2020-03-05 Alexander PopovAdd kernel version detection
 commit | commitdiff | tree
2020-03-05 Alexander PopovSimplify perform_checks()
 commit | commitdiff | tree
2020-03-04 Alexander PopovFix versions in KSPP recommendations
 commit | commitdiff | tree
2020-03-04 Alexander PopovFix the name for ClearLinux config
 commit | commitdiff | tree
2020-03-04 Alexander PopovSTACKPROTECTOR_PER_TASK is now default for ARM
 commit | commitdiff | tree
2020-03-04 Alexander PopovSECURITY_WRITABLE_HOOKS is not disabled by default
 commit | commitdiff | tree
2020-03-04 Alexander PopovInclude GCC_PLUGINS to defconfig
 commit | commitdiff | tree
2020-03-04 Alexander PopovUpdate defconfigs (v5.5)
 commit | commitdiff | tree
2020-02-27 Alexander PopovMerge branch 'config-updates-from-hackurx'
 commit | commitdiff | tree
2020-01-14 Alexander PopovFix INIT_ON_FREE_DEFAULT_ON vs PAGE_POISONING issue #28
 commit | commitdiff | tree
2020-01-14 Alexander PopovAnswer the question about CONFIG_PANIC_ON_OOPS
 commit | commitdiff | tree
2020-01-11 Alexander PopovRecommend disabling VIDEO_VIVID
 commit | commitdiff | tree
2020-01-10 Alexander PopovTake some ideas from NixOS/nixpkgs hardened kernel...
commit | commitdiff | tree
2019-12-02 Alexander PopovPretty printing
 commit | commitdiff | tree
2019-11-29 Alexander PopovVersion 0.5.3 (supports Linux kernel v5.3)
 commit | commitdiff | tree
2019-11-29 Alexander PopovAdd the link to Linux Kernel Defence Map
 commit | commitdiff | tree
2019-11-29 Alexander PopovUpdate the README
 commit | commitdiff | tree
2019-11-29 Alexander PopovUpdate defconfigs
 commit | commitdiff | tree
2019-11-29 Alexander PopovRANDOMIZE_BASE is now enabled by default on arm64
 commit | commitdiff | tree
2019-11-28 Alexander Popovx86_32: INTEL_IOMMU is not enabled by default - fix...
commit | commitdiff | tree
2019-11-28 Alexander PopovX86_INTEL_UMIP is now X86_UMIP
 commit | commitdiff | tree
2019-11-28 Alexander Popovx86_64: more hardening options are enabled by default...
commit | commitdiff | tree
2019-11-28 Alexander PopovImprove the list of the kernel parameters in TODO
 commit | commitdiff | tree
2019-11-28 Alexander PopovAdd CLIP OS links
 commit | commitdiff | tree
2019-11-28 Alexander PopovUpdate the column width
 commit | commitdiff | tree
2019-11-28 Alexander PopovSome of my recommendations are used by CLIP OS, change...
commit | commitdiff | tree
2019-11-28 Alexander PopovDon't recommend disabling IKCONFIG anymore
 commit | commitdiff | tree
2019-11-28 Alexander PopovSave more hardening sysctls for TODO
 commit | commitdiff | tree
2019-11-28 Alexander PopovUpdate CLIP OS doc
 commit | commitdiff | tree
2019-11-28 Alexander PopovGroup security policies together
 commit | commitdiff | tree
2019-11-28 Alexander PopovAdd INIT_ON_ALLOC_DEFAULT_ON and INIT_ON_FREE_DEFAULT_ON...
commit | commitdiff | tree
2019-11-28 Alexander PopovAdd RODATA_FULL_DEFAULT_ENABLED for ARM64
 commit | commitdiff | tree
2019-11-28 Alexander PopovAdd info about Debian and AOSP kernel configs to links.txt
 commit | commitdiff | tree
2019-11-28 Alexander PopovAdd Debian Buster kernel config
 commit | commitdiff | tree
2019-11-28 Alexander PopovAdd AOSP kernel config for Pixel 3a
 commit | commitdiff | tree
2019-08-23 Alexander PopovIntroduce the versioning
 commit | commitdiff | tree
2019-08-23 Alexander PopovUpdate the script output in the README
 commit | commitdiff | tree
2019-08-23 Alexander PopovAdd HARDEN_BRANCH_PREDICTOR and HARDEN_EL2_VECTORS
 commit | commitdiff | tree
2019-08-23 Alexander PopovBring more order to the offsets (style fix)
 commit | commitdiff | tree
2019-08-22 Alexander PopovAdd INIT_STACK_ALL as an alternative to GCC_PLUGIN_STRUCTLEA...
commit | commitdiff | tree
2019-08-22 Alexander PopovAdd SHUFFLE_PAGE_ALLOCATOR from v5.2
 commit | commitdiff | tree
2019-08-22 Alexander PopovAdd some new sysctls (to remember them)
 commit | commitdiff | tree
2019-07-08 Alexander PopovMerge pull request #22 from adrianopol/master
 commit | commitdiff | tree
2019-06-24 Alexander PopovDo code refactoring without changing the functionality
 commit | commitdiff | tree
2019-06-24 Alexander PopovMerge branch 'json-support'
 commit | commitdiff | tree
2019-06-24 Alexander Popovjson: Fix minor things and update the README
 commit | commitdiff | tree
2019-06-04 Alexander PopovDrop CONFIG_X86_MSR from the recommendations
 commit | commitdiff | tree
2019-06-03 Alexander PopovAdd the LDISC_AUTOLOAD check
 commit | commitdiff | tree
2019-06-03 Alexander PopovAttribute some of my recommendations to CLIP OS - part II
 commit | commitdiff | tree
2019-06-03 Alexander PopovAdd the link to the CLIP OS kernel configuration
 commit | commitdiff | tree
2019-06-03 Alexander PopovUpdate the README
 commit | commitdiff | tree
2019-06-03 Alexander PopovUpdate the README (printing format)
 commit | commitdiff | tree
2019-06-03 Alexander PopovAdd a snapshot of the CLIP OS config documentation
 commit | commitdiff | tree
2019-06-03 Alexander PopovAttribute some of my recommendations to CLIP OS
 commit | commitdiff | tree
2019-06-03 Alexander PopovAdd my recommendations for AMD (similar to CLIP OS...
commit | commitdiff | tree
2019-06-03 Alexander PopovAdd X86-specific CLIP OS recommendations for kernel...
commit | commitdiff | tree
2019-06-03 Alexander PopovAdd arch-independent CLIP OS recommendations for kernel...
commit | commitdiff | tree
2019-06-03 Alexander PopovAdd more details about STACKLEAK
 commit | commitdiff | tree
2019-06-03 Alexander PopovDon't recommend any particular LSM to avoid the holy war
 commit | commitdiff | tree
2019-06-03 Alexander PopovAdd CLIP OS recommendations for cutting attack surface
 commit | commitdiff | tree
2019-06-03 Alexander PopovImprove printing of the results
 commit | commitdiff | tree
2019-06-03 Alexander PopovUpdate the link to Alpine config
 commit | commitdiff | tree
2019-06-03 Alexander PopovMerge pull request #18 from HacKurx/patch-1
 commit | commitdiff | tree
2019-05-27 Alexander PopovAdd more kernel command line parameters to comments
 commit | commitdiff | tree
2019-05-17 Alexander PopovMerge remote-tracking branch 'hackurx/master'
 commit | commitdiff | tree
2019-03-20 Alexander PopovAdd Q&A to the README
 commit | commitdiff | tree
2019-03-13 Alexander PopovAdd the comment about kptr_restrict
 commit | commitdiff | tree
2019-03-13 Alexander PopovAdd ARM64_PTR_AUTH check
 commit | commitdiff | tree
2019-03-13 Alexander PopovAdd STACKPROTECTOR_PER_TASK check for ARM
 commit | commitdiff | tree
2019-03-13 Alexander PopovAdd defconfigs for 5.0
 commit | commitdiff | tree
2019-03-12 Alexander PopovDon't hide AND check results if the requirements are...
commit | commitdiff | tree
2019-03-12 Alexander PopovUpdate the README
 commit | commitdiff | tree
2019-03-12 Alexander PopovImprove the final result output
 commit | commitdiff | tree
2019-03-12 Alexander PopovUse the AND check for HARDENED_USERCOPY_FALLBACK
 commit | commitdiff | tree
2019-03-12 Alexander PopovUse the AND check for PAGE_POISONING_NO_SANITY and...
commit | commitdiff | tree
2019-03-12 Alexander PopovImplement AND ComplexOptCheck
 commit | commitdiff | tree
2019-03-12 Alexander PopovAdd a sanity check and do minor refactoring
 commit | commitdiff | tree
2019-03-12 Alexander PopovIntroduce the ComplexOptCheck superclass
 commit | commitdiff | tree
2019-03-11 Alexander PopovUpdate the README
 commit | commitdiff | tree
2019-03-11 Alexander PopovAdd explicit checks for CONFIG_MODULES and CONFIG_DEVMEM
 commit | commitdiff | tree
2019-03-11 Alexander PopovAdd missing OR use case
 commit | commitdiff | tree
2019-03-11 Alexander PopovImprove the output of OR checks
 commit | commitdiff | tree
2019-03-04 Alexander PopovAdd the RESET_ATTACK_MITIGATION check according to...
commit | commitdiff | tree
2019-03-04 Alexander PopovFix false positive about CONFIG_MODULE_SIG_FORCE.
 commit | commitdiff | tree
2019-01-24 Alexander PopovUpdate the README and comments after adding ARM support
 commit | commitdiff | tree
2019-01-24 Alexander PopovFix typo in KSPP recommendations for ARM
 commit | commitdiff | tree
2019-01-24 Alexander PopovAdd ARM support
 commit | commitdiff | tree
2019-01-23 Alexander PopovUpdate the README after adding ARM64 support
 commit | commitdiff | tree
2019-01-23 Alexander PopovGo through all the checks in debug mode
 commit | commitdiff | tree
2019-01-23 Alexander PopovAdd ARM64 support
 commit | commitdiff | tree
2019-01-22 Alexander PopovUpdate the README after adding X86_32 support
 commit | commitdiff | tree
2019-01-22 Alexander PopovAdd X86_32 support
 commit | commitdiff | tree
2019-01-22 Alexander PopovMerge branch 'arch-configs'
 commit | commitdiff | tree
2019-01-22 Alexander PopovCreate a separate directory for distro configs
 commit | commitdiff | tree
2019-01-22 Alexander PopovCreate a separate directory for defconfigs
 commit | commitdiff | tree
2019-01-22 Alexander PopovAdd arm64 defconfig for v4.20
 commit | commitdiff | tree
2019-01-22 Alexander PopovAdd arm defconfig for v4.20
 commit | commitdiff | tree
2019-01-22 Alexander PopovAdd x86_32 defconfig for v4.20
 commit | commitdiff | tree
2019-01-22 Alexander PopovCreate a separate directory for KSPP recommendations
 commit | commitdiff | tree
next
kconfig-hardened-check