jxself.org public git repositories - kconfig-hardened-check.git/search

projects / kconfig-hardened-check.git / search

2020-03-18	Alexander Popov	LOCKDOWN update - part I	commit \| commitdiff \| tree
2020-03-18	Alexander Popov	Don't restrict arch for "is not set" checks	commit \| commitdiff \| tree
2020-03-17	Alexander Popov	SECURITY_LOCKDOWN_LSM is recommended by CLIP OS	commit \| commitdiff \| tree
2020-03-08	Alexander Popov	Add CONFIG_INTEGRITY for userspace hardening	commit \| commitdiff \| tree
2020-03-08	Alexander Popov	Fix the comments	commit \| commitdiff \| tree
2020-03-08	Alexander Popov	Don't show all checks from all supported platforms...	commit \| commitdiff \| tree
2020-03-07	Alexander Popov	Improve 'dunno' report in debug_mode	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Add SECURITY_LOADPIN_ENFORCE check	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Update CLIP OS kernel security documentation	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Add CLIP OS recommendation about CONFIG_STAGING	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Add CLIP OS recommendation about CONFIG_RANDOM_TRUST_BOOTLOADER	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Update the README	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Improve debug_mode a lot	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Improve the table header	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Drop unused OptCheck printing	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	Update 'decision' for new KSPP recommendations	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	Update KSPP recommendations	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	Update the README	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	LDISC_AUTOLOAD can be disabled since v5.1	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	REFCOUNT_FULL is enabled by default since v5.5	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	Add kernel version checks for complex checks with logical...	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	Add kernel version detection	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	Simplify perform_checks()	commit \| commitdiff \| tree
2020-03-04	Alexander Popov	Fix versions in KSPP recommendations	commit \| commitdiff \| tree
2020-03-04	Alexander Popov	Fix the name for ClearLinux config	commit \| commitdiff \| tree
2020-03-04	Alexander Popov	STACKPROTECTOR_PER_TASK is now default for ARM	commit \| commitdiff \| tree
2020-03-04	Alexander Popov	SECURITY_WRITABLE_HOOKS is not disabled by default	commit \| commitdiff \| tree
2020-03-04	Alexander Popov	Include GCC_PLUGINS to defconfig	commit \| commitdiff \| tree
2020-03-04	Alexander Popov	Update defconfigs (v5.5)	commit \| commitdiff \| tree
2020-02-27	Alexander Popov	Merge branch 'config-updates-from-hackurx'	commit \| commitdiff \| tree
2020-01-14	Alexander Popov	Fix INIT_ON_FREE_DEFAULT_ON vs PAGE_POISONING issue #28	commit \| commitdiff \| tree
2020-01-14	Alexander Popov	Answer the question about CONFIG_PANIC_ON_OOPS	commit \| commitdiff \| tree
2020-01-11	Alexander Popov	Recommend disabling VIDEO_VIVID	commit \| commitdiff \| tree
2020-01-10	Alexander Popov	Take some ideas from NixOS/nixpkgs hardened kernel...	commit \| commitdiff \| tree
2019-12-02	Alexander Popov	Pretty printing	commit \| commitdiff \| tree
2019-11-29	Alexander Popov	Version 0.5.3 (supports Linux kernel v5.3)	commit \| commitdiff \| tree
2019-11-29	Alexander Popov	Add the link to Linux Kernel Defence Map	commit \| commitdiff \| tree
2019-11-29	Alexander Popov	Update the README	commit \| commitdiff \| tree
2019-11-29	Alexander Popov	Update defconfigs	commit \| commitdiff \| tree
2019-11-29	Alexander Popov	RANDOMIZE_BASE is now enabled by default on arm64	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	x86_32: INTEL_IOMMU is not enabled by default - fix...	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	X86_INTEL_UMIP is now X86_UMIP	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	x86_64: more hardening options are enabled by default...	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Improve the list of the kernel parameters in TODO	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Add CLIP OS links	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Update the column width	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Some of my recommendations are used by CLIP OS, change...	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Don't recommend disabling IKCONFIG anymore	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Save more hardening sysctls for TODO	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Update CLIP OS doc	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Group security policies together	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Add INIT_ON_ALLOC_DEFAULT_ON and INIT_ON_FREE_DEFAULT_ON...	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Add RODATA_FULL_DEFAULT_ENABLED for ARM64	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Add info about Debian and AOSP kernel configs to links.txt	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Add Debian Buster kernel config	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Add AOSP kernel config for Pixel 3a	commit \| commitdiff \| tree
2019-08-23	Alexander Popov	Introduce the versioning	commit \| commitdiff \| tree
2019-08-23	Alexander Popov	Update the script output in the README	commit \| commitdiff \| tree
2019-08-23	Alexander Popov	Add HARDEN_BRANCH_PREDICTOR and HARDEN_EL2_VECTORS	commit \| commitdiff \| tree
2019-08-23	Alexander Popov	Bring more order to the offsets (style fix)	commit \| commitdiff \| tree
2019-08-22	Alexander Popov	Add INIT_STACK_ALL as an alternative to GCC_PLUGIN_STRUCTLEA...	commit \| commitdiff \| tree
2019-08-22	Alexander Popov	Add SHUFFLE_PAGE_ALLOCATOR from v5.2	commit \| commitdiff \| tree
2019-08-22	Alexander Popov	Add some new sysctls (to remember them)	commit \| commitdiff \| tree
2019-06-24	Alexander Popov	Do code refactoring without changing the functionality	commit \| commitdiff \| tree
2019-06-24	Alexander Popov	Merge branch 'json-support'	commit \| commitdiff \| tree
2019-06-24	Alexander Popov	json: Fix minor things and update the README	commit \| commitdiff \| tree
2019-06-04	Alexander Popov	Drop CONFIG_X86_MSR from the recommendations	commit \| commitdiff \| tree
2019-06-03	Alexander Popov	Add the LDISC_AUTOLOAD check	commit \| commitdiff \| tree
2019-06-03	Alexander Popov	Attribute some of my recommendations to CLIP OS - part II	commit \| commitdiff \| tree
2019-06-03	Alexander Popov	Add the link to the CLIP OS kernel configuration	commit \| commitdiff \| tree
2019-06-03	Alexander Popov	Update the README	commit \| commitdiff \| tree
2019-06-03	Alexander Popov	Update the README (printing format)	commit \| commitdiff \| tree
2019-06-03	Alexander Popov	Add a snapshot of the CLIP OS config documentation	commit \| commitdiff \| tree
2019-06-03	Alexander Popov	Attribute some of my recommendations to CLIP OS	commit \| commitdiff \| tree
2019-06-03	Alexander Popov	Add my recommendations for AMD (similar to CLIP OS...	commit \| commitdiff \| tree
2019-06-03	Alexander Popov	Add X86-specific CLIP OS recommendations for kernel...	commit \| commitdiff \| tree
2019-06-03	Alexander Popov	Add arch-independent CLIP OS recommendations for kernel...	commit \| commitdiff \| tree
2019-06-03	Alexander Popov	Add more details about STACKLEAK	commit \| commitdiff \| tree
2019-06-03	Alexander Popov	Don't recommend any particular LSM to avoid the holy war	commit \| commitdiff \| tree
2019-06-03	Alexander Popov	Add CLIP OS recommendations for cutting attack surface	commit \| commitdiff \| tree
2019-06-03	Alexander Popov	Improve printing of the results	commit \| commitdiff \| tree
2019-06-03	Alexander Popov	Update the link to Alpine config	commit \| commitdiff \| tree
2019-05-27	Alexander Popov	Add more kernel command line parameters to comments	commit \| commitdiff \| tree
2019-05-17	Alexander Popov	Merge remote-tracking branch 'hackurx/master'	commit \| commitdiff \| tree
2019-03-20	Alexander Popov	Add Q&A to the README	commit \| commitdiff \| tree
2019-03-13	Alexander Popov	Add the comment about kptr_restrict	commit \| commitdiff \| tree
2019-03-13	Alexander Popov	Add ARM64_PTR_AUTH check	commit \| commitdiff \| tree
2019-03-13	Alexander Popov	Add STACKPROTECTOR_PER_TASK check for ARM	commit \| commitdiff \| tree
2019-03-13	Alexander Popov	Add defconfigs for 5.0	commit \| commitdiff \| tree
2019-03-12	Alexander Popov	Don't hide AND check results if the requirements are...	commit \| commitdiff \| tree
2019-03-12	Alexander Popov	Update the README	commit \| commitdiff \| tree
2019-03-12	Alexander Popov	Improve the final result output	commit \| commitdiff \| tree
2019-03-12	Alexander Popov	Use the AND check for HARDENED_USERCOPY_FALLBACK	commit \| commitdiff \| tree
2019-03-12	Alexander Popov	Use the AND check for PAGE_POISONING_NO_SANITY and...	commit \| commitdiff \| tree
2019-03-12	Alexander Popov	Implement AND ComplexOptCheck	commit \| commitdiff \| tree
2019-03-12	Alexander Popov	Add a sanity check and do minor refactoring	commit \| commitdiff \| tree
2019-03-12	Alexander Popov	Introduce the ComplexOptCheck superclass	commit \| commitdiff \| tree
2019-03-11	Alexander Popov	Update the README	commit \| commitdiff \| tree
2019-03-11	Alexander Popov	Add explicit checks for CONFIG_MODULES and CONFIG_DEVMEM	commit \| commitdiff \| tree
2019-03-11	Alexander Popov	Add missing OR use case	commit \| commitdiff \| tree
next

kconfig-hardened-check

RSS Atom