projects / kconfig-hardened-check.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
Call it a tool
2020-03-26 Alexander PopovCall it a tool
 commit | commitdiff | tree
2020-03-26 Alexander PopovUh, setuptools doesn't like package names that contain...
commit | commitdiff | tree
2020-03-25 Alexander PopovAdd main() and clean up working with globals
 commit | commitdiff | tree
2020-03-25 Alexander PopovRename to kconfig-hardened-check/__init__.py
 commit | commitdiff | tree
2020-03-25 Alexander PopovMove files to kconfig-hardened-check folder
 commit | commitdiff | tree
2020-03-25 Alexander PopovRename LICENSE file
 commit | commitdiff | tree
2020-03-24 Alexander PopovVersion 0.5.5 (supports Linux kernel v5.5)
 commit | commitdiff | tree
2020-03-24 Alexander PopovUpdate the README
 commit | commitdiff | tree
2020-03-24 Alexander PopovCLIP OS recommends disabling Intel TSX
 commit | commitdiff | tree
2020-03-24 Alexander PopovSmall syctl cleanup
 commit | commitdiff | tree
2020-03-20 Alexander PopovCopperheadOS disables the kernel's CONFIG_AIO feature
 commit | commitdiff | tree
2020-03-20 Alexander PopovKSPP now recommends PAGE_TABLE_ISOLATION for X86_32
 commit | commitdiff | tree
2020-03-20 Alexander PopovUpdate KSPP recommendations
 commit | commitdiff | tree
2020-03-18 Alexander PopovINTEL_IOMMU is available for X86_32
 commit | commitdiff | tree
2020-03-18 Alexander PopovMove VMSPLIT_3G to 'userspace_hardening'
 commit | commitdiff | tree
2020-03-18 Alexander PopovStyle fix
 commit | commitdiff | tree
2020-03-18 Alexander PopovIOMMU_SUPPORT is needed for all architectures
 commit | commitdiff | tree
2020-03-18 Alexander PopovSECURITY_WRITABLE_HOOKS and SECURITY_SELINUX_DISABLE...
commit | commitdiff | tree
2020-03-18 Alexander PopovAdd CLIP OS recommendation about X86_CPUID
 commit | commitdiff | tree
2020-03-18 Alexander PopovFix RANDOM_TRUST_BOOTLOADER check
 commit | commitdiff | tree
2020-03-18 Alexander PopovLOCKDOWN update - part II
 commit | commitdiff | tree
2020-03-18 Alexander PopovLOCKDOWN update - part I
 commit | commitdiff | tree
2020-03-18 Alexander PopovDon't restrict arch for "is not set" checks
 commit | commitdiff | tree
2020-03-17 Alexander PopovSECURITY_LOCKDOWN_LSM is recommended by CLIP OS
 commit | commitdiff | tree
2020-03-08 Alexander PopovAdd CONFIG_INTEGRITY for userspace hardening
 commit | commitdiff | tree
2020-03-08 Alexander PopovFix the comments
 commit | commitdiff | tree
2020-03-08 Alexander PopovDon't show all checks from all supported platforms...
commit | commitdiff | tree
2020-03-07 Alexander PopovImprove 'dunno' report in debug_mode
 commit | commitdiff | tree
2020-03-06 Alexander PopovAdd SECURITY_LOADPIN_ENFORCE check
 commit | commitdiff | tree
2020-03-06 Alexander PopovUpdate CLIP OS kernel security documentation
 commit | commitdiff | tree
2020-03-06 Alexander PopovAdd CLIP OS recommendation about CONFIG_STAGING
 commit | commitdiff | tree
2020-03-06 Alexander PopovAdd CLIP OS recommendation about CONFIG_RANDOM_TRUST_BOOTLOADER
 commit | commitdiff | tree
2020-03-06 Alexander PopovUpdate the README
 commit | commitdiff | tree
2020-03-06 Alexander PopovImprove debug_mode a lot
 commit | commitdiff | tree
2020-03-06 Alexander PopovImprove the table header
 commit | commitdiff | tree
2020-03-06 Alexander PopovDrop unused OptCheck printing
 commit | commitdiff | tree
2020-03-05 Alexander PopovUpdate 'decision' for new KSPP recommendations
 commit | commitdiff | tree
2020-03-05 Alexander PopovUpdate KSPP recommendations
 commit | commitdiff | tree
2020-03-05 Alexander PopovUpdate the README
 commit | commitdiff | tree
2020-03-05 Alexander PopovLDISC_AUTOLOAD can be disabled since v5.1
 commit | commitdiff | tree
2020-03-05 Alexander PopovREFCOUNT_FULL is enabled by default since v5.5
 commit | commitdiff | tree
2020-03-05 Alexander PopovAdd kernel version checks for complex checks with logical...
commit | commitdiff | tree
2020-03-05 Alexander PopovAdd kernel version detection
 commit | commitdiff | tree
2020-03-05 Alexander PopovSimplify perform_checks()
 commit | commitdiff | tree
2020-03-04 Alexander PopovFix versions in KSPP recommendations
 commit | commitdiff | tree
2020-03-04 Alexander PopovFix the name for ClearLinux config
 commit | commitdiff | tree
2020-03-04 Alexander PopovSTACKPROTECTOR_PER_TASK is now default for ARM
 commit | commitdiff | tree
2020-03-04 Alexander PopovSECURITY_WRITABLE_HOOKS is not disabled by default
 commit | commitdiff | tree
2020-03-04 Alexander PopovInclude GCC_PLUGINS to defconfig
 commit | commitdiff | tree
2020-03-04 Alexander PopovUpdate defconfigs (v5.5)
 commit | commitdiff | tree
2020-02-27 Alexander PopovMerge branch 'config-updates-from-hackurx'
 commit | commitdiff | tree
2020-01-14 Alexander PopovFix INIT_ON_FREE_DEFAULT_ON vs PAGE_POISONING issue #28
 commit | commitdiff | tree
2020-01-14 Alexander PopovAnswer the question about CONFIG_PANIC_ON_OOPS
 commit | commitdiff | tree
2020-01-11 Alexander PopovRecommend disabling VIDEO_VIVID
 commit | commitdiff | tree
2020-01-10 Alexander PopovTake some ideas from NixOS/nixpkgs hardened kernel...
commit | commitdiff | tree
2019-12-02 Alexander PopovPretty printing
 commit | commitdiff | tree
2019-11-29 Alexander PopovVersion 0.5.3 (supports Linux kernel v5.3)
 commit | commitdiff | tree
2019-11-29 Alexander PopovAdd the link to Linux Kernel Defence Map
 commit | commitdiff | tree
2019-11-29 Alexander PopovUpdate the README
 commit | commitdiff | tree
2019-11-29 Alexander PopovUpdate defconfigs
 commit | commitdiff | tree
2019-11-29 Alexander PopovRANDOMIZE_BASE is now enabled by default on arm64
 commit | commitdiff | tree
2019-11-28 Alexander Popovx86_32: INTEL_IOMMU is not enabled by default - fix...
commit | commitdiff | tree
2019-11-28 Alexander PopovX86_INTEL_UMIP is now X86_UMIP
 commit | commitdiff | tree
2019-11-28 Alexander Popovx86_64: more hardening options are enabled by default...
commit | commitdiff | tree
2019-11-28 Alexander PopovImprove the list of the kernel parameters in TODO
 commit | commitdiff | tree
2019-11-28 Alexander PopovAdd CLIP OS links
 commit | commitdiff | tree
2019-11-28 Alexander PopovUpdate the column width
 commit | commitdiff | tree
2019-11-28 Alexander PopovSome of my recommendations are used by CLIP OS, change...
commit | commitdiff | tree
2019-11-28 Alexander PopovDon't recommend disabling IKCONFIG anymore
 commit | commitdiff | tree
2019-11-28 Alexander PopovSave more hardening sysctls for TODO
 commit | commitdiff | tree
2019-11-28 Alexander PopovUpdate CLIP OS doc
 commit | commitdiff | tree
2019-11-28 Alexander PopovGroup security policies together
 commit | commitdiff | tree
2019-11-28 Alexander PopovAdd INIT_ON_ALLOC_DEFAULT_ON and INIT_ON_FREE_DEFAULT_ON...
commit | commitdiff | tree
2019-11-28 Alexander PopovAdd RODATA_FULL_DEFAULT_ENABLED for ARM64
 commit | commitdiff | tree
2019-11-28 Alexander PopovAdd info about Debian and AOSP kernel configs to links.txt
 commit | commitdiff | tree
2019-11-28 Alexander PopovAdd Debian Buster kernel config
 commit | commitdiff | tree
2019-11-28 Alexander PopovAdd AOSP kernel config for Pixel 3a
 commit | commitdiff | tree
2019-08-23 Alexander PopovIntroduce the versioning
 commit | commitdiff | tree
2019-08-23 Alexander PopovUpdate the script output in the README
 commit | commitdiff | tree
2019-08-23 Alexander PopovAdd HARDEN_BRANCH_PREDICTOR and HARDEN_EL2_VECTORS
 commit | commitdiff | tree
2019-08-23 Alexander PopovBring more order to the offsets (style fix)
 commit | commitdiff | tree
2019-08-22 Alexander PopovAdd INIT_STACK_ALL as an alternative to GCC_PLUGIN_STRUCTLEA...
commit | commitdiff | tree
2019-08-22 Alexander PopovAdd SHUFFLE_PAGE_ALLOCATOR from v5.2
 commit | commitdiff | tree
2019-08-22 Alexander PopovAdd some new sysctls (to remember them)
 commit | commitdiff | tree
2019-06-24 Alexander PopovDo code refactoring without changing the functionality
 commit | commitdiff | tree
2019-06-24 Alexander PopovMerge branch 'json-support'
 commit | commitdiff | tree
2019-06-24 Alexander Popovjson: Fix minor things and update the README
 commit | commitdiff | tree
2019-06-04 Alexander PopovDrop CONFIG_X86_MSR from the recommendations
 commit | commitdiff | tree
2019-06-03 Alexander PopovAdd the LDISC_AUTOLOAD check
 commit | commitdiff | tree
2019-06-03 Alexander PopovAttribute some of my recommendations to CLIP OS - part II
 commit | commitdiff | tree
2019-06-03 Alexander PopovAdd the link to the CLIP OS kernel configuration
 commit | commitdiff | tree
2019-06-03 Alexander PopovUpdate the README
 commit | commitdiff | tree
2019-06-03 Alexander PopovUpdate the README (printing format)
 commit | commitdiff | tree
2019-06-03 Alexander PopovAdd a snapshot of the CLIP OS config documentation
 commit | commitdiff | tree
2019-06-03 Alexander PopovAttribute some of my recommendations to CLIP OS
 commit | commitdiff | tree
2019-06-03 Alexander PopovAdd my recommendations for AMD (similar to CLIP OS...
commit | commitdiff | tree
2019-06-03 Alexander PopovAdd X86-specific CLIP OS recommendations for kernel...
commit | commitdiff | tree
2019-06-03 Alexander PopovAdd arch-independent CLIP OS recommendations for kernel...
commit | commitdiff | tree
2019-06-03 Alexander PopovAdd more details about STACKLEAK
 commit | commitdiff | tree
2019-06-03 Alexander PopovDon't recommend any particular LSM to avoid the holy war
 commit | commitdiff | tree
next
kconfig-hardened-check