jxself.org public git repositories - kconfig-hardened-check.git/search

projects / kconfig-hardened-check.git / search

2020-03-31	Alexander Popov	Implement PresenceCheck and use it for LDISC_AUTOLOAD	commit \| commitdiff \| tree
2020-03-31	Alexander Popov	Fix ComplexOptCheck result printing	commit \| commitdiff \| tree
2020-03-31	Alexander Popov	Newline should be printed by print_checklist() that...	commit \| commitdiff \| tree
2020-03-31	Alexander Popov	Add more tests to increase coverage - IV	commit \| commitdiff \| tree
2020-03-31	Alexander Popov	Create polymorphism for printing, add table_print(...	commit \| commitdiff \| tree
2020-03-31	Alexander Popov	Revisit special behavior in checking and printing that...	commit \| commitdiff \| tree
2020-03-31	Alexander Popov	Rename some workflow steps	commit \| commitdiff \| tree
2020-03-30	Alexander Popov	Add more tests to increase coverage - III	commit \| commitdiff \| tree
2020-03-30	Alexander Popov	Add more tests to increase coverage - II	commit \| commitdiff \| tree
2020-03-30	Alexander Popov	Add more tests to increase coverage - I	commit \| commitdiff \| tree
2020-03-30	Alexander Popov	Collect coverage	commit \| commitdiff \| tree
2020-03-30	Alexander Popov	Count checked configs	commit \| commitdiff \| tree
2020-03-30	Alexander Popov	Check all configs automatically	commit \| commitdiff \| tree
2020-03-30	Alexander Popov	Revisit return values	commit \| commitdiff \| tree
2020-03-30	Alexander Popov	Create the github workflow for functional tests	commit \| commitdiff \| tree
2020-03-28	Alexander Popov	Fix the shebang to allow `./get-nix-kconfig.py`	commit \| commitdiff \| tree
2020-03-27	Alexander Popov	Add NixOS hardened kernel config	commit \| commitdiff \| tree
2020-03-26	Alexander Popov	Fix typo in README	commit \| commitdiff \| tree
2020-03-26	Alexander Popov	Add vim swp files to gitignore	commit \| commitdiff \| tree
2020-03-26	Alexander Popov	Merge branch 'nix'	commit \| commitdiff \| tree
2020-03-26	Alexander Popov	Update the README (describing installation)	commit \| commitdiff \| tree
2020-03-26	Alexander Popov	Add a wrapper for using the tool without installation...	commit \| commitdiff \| tree
2020-03-26	Alexander Popov	Enable distribution via pip/setuptools	commit \| commitdiff \| tree
2020-03-26	Alexander Popov	Call it a tool	commit \| commitdiff \| tree
2020-03-26	Alexander Popov	Uh, setuptools doesn't like package names that contain...	commit \| commitdiff \| tree
2020-03-25	Alexander Popov	Add main() and clean up working with globals	commit \| commitdiff \| tree
2020-03-25	Alexander Popov	Rename to kconfig-hardened-check/__init__.py	commit \| commitdiff \| tree
2020-03-25	Alexander Popov	Move files to kconfig-hardened-check folder	commit \| commitdiff \| tree
2020-03-25	Alexander Popov	Rename LICENSE file	commit \| commitdiff \| tree
2020-03-24	Alexander Popov	Version 0.5.5 (supports Linux kernel v5.5)	commit \| commitdiff \| tree
2020-03-24	Alexander Popov	Update the README	commit \| commitdiff \| tree
2020-03-24	Alexander Popov	CLIP OS recommends disabling Intel TSX	commit \| commitdiff \| tree
2020-03-24	Alexander Popov	Small syctl cleanup	commit \| commitdiff \| tree
2020-03-23	Alexander Popov	Merge pull request #34 from madaidan/grapheneos	commit \| commitdiff \| tree
2020-03-20	Alexander Popov	CopperheadOS disables the kernel's CONFIG_AIO feature	commit \| commitdiff \| tree
2020-03-20	Alexander Popov	KSPP now recommends PAGE_TABLE_ISOLATION for X86_32	commit \| commitdiff \| tree
2020-03-20	Alexander Popov	Update KSPP recommendations	commit \| commitdiff \| tree
2020-03-18	Alexander Popov	INTEL_IOMMU is available for X86_32	commit \| commitdiff \| tree
2020-03-18	Alexander Popov	Move VMSPLIT_3G to 'userspace_hardening'	commit \| commitdiff \| tree
2020-03-18	Alexander Popov	Style fix	commit \| commitdiff \| tree
2020-03-18	Alexander Popov	IOMMU_SUPPORT is needed for all architectures	commit \| commitdiff \| tree
2020-03-18	Alexander Popov	SECURITY_WRITABLE_HOOKS and SECURITY_SELINUX_DISABLE...	commit \| commitdiff \| tree
2020-03-18	Alexander Popov	Add CLIP OS recommendation about X86_CPUID	commit \| commitdiff \| tree
2020-03-18	Alexander Popov	Fix RANDOM_TRUST_BOOTLOADER check	commit \| commitdiff \| tree
2020-03-18	Alexander Popov	LOCKDOWN update - part II	commit \| commitdiff \| tree
2020-03-18	Alexander Popov	LOCKDOWN update - part I	commit \| commitdiff \| tree
2020-03-18	Alexander Popov	Don't restrict arch for "is not set" checks	commit \| commitdiff \| tree
2020-03-17	Alexander Popov	SECURITY_LOCKDOWN_LSM is recommended by CLIP OS	commit \| commitdiff \| tree
2020-03-08	Alexander Popov	Add CONFIG_INTEGRITY for userspace hardening	commit \| commitdiff \| tree
2020-03-08	Alexander Popov	Fix the comments	commit \| commitdiff \| tree
2020-03-08	Alexander Popov	Don't show all checks from all supported platforms...	commit \| commitdiff \| tree
2020-03-07	Alexander Popov	Improve 'dunno' report in debug_mode	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Add SECURITY_LOADPIN_ENFORCE check	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Update CLIP OS kernel security documentation	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Add CLIP OS recommendation about CONFIG_STAGING	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Add CLIP OS recommendation about CONFIG_RANDOM_TRUST_BOOTLOADER	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Update the README	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Improve debug_mode a lot	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Improve the table header	commit \| commitdiff \| tree
2020-03-06	Alexander Popov	Drop unused OptCheck printing	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	Update 'decision' for new KSPP recommendations	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	Update KSPP recommendations	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	Update the README	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	LDISC_AUTOLOAD can be disabled since v5.1	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	REFCOUNT_FULL is enabled by default since v5.5	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	Add kernel version checks for complex checks with logical...	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	Add kernel version detection	commit \| commitdiff \| tree
2020-03-05	Alexander Popov	Simplify perform_checks()	commit \| commitdiff \| tree
2020-03-04	Alexander Popov	Fix versions in KSPP recommendations	commit \| commitdiff \| tree
2020-03-04	Alexander Popov	Fix the name for ClearLinux config	commit \| commitdiff \| tree
2020-03-04	Alexander Popov	STACKPROTECTOR_PER_TASK is now default for ARM	commit \| commitdiff \| tree
2020-03-04	Alexander Popov	SECURITY_WRITABLE_HOOKS is not disabled by default	commit \| commitdiff \| tree
2020-03-04	Alexander Popov	Include GCC_PLUGINS to defconfig	commit \| commitdiff \| tree
2020-03-04	Alexander Popov	Update defconfigs (v5.5)	commit \| commitdiff \| tree
2020-02-27	Alexander Popov	Merge branch 'config-updates-from-hackurx'	commit \| commitdiff \| tree
2020-01-14	Alexander Popov	Fix INIT_ON_FREE_DEFAULT_ON vs PAGE_POISONING issue #28	commit \| commitdiff \| tree
2020-01-14	Alexander Popov	Answer the question about CONFIG_PANIC_ON_OOPS	commit \| commitdiff \| tree
2020-01-11	Alexander Popov	Recommend disabling VIDEO_VIVID	commit \| commitdiff \| tree
2020-01-10	Alexander Popov	Take some ideas from NixOS/nixpkgs hardened kernel...	commit \| commitdiff \| tree
2019-12-02	Alexander Popov	Pretty printing	commit \| commitdiff \| tree
2019-11-29	Alexander Popov	Version 0.5.3 (supports Linux kernel v5.3)	commit \| commitdiff \| tree
2019-11-29	Alexander Popov	Add the link to Linux Kernel Defence Map	commit \| commitdiff \| tree
2019-11-29	Alexander Popov	Update the README	commit \| commitdiff \| tree
2019-11-29	Alexander Popov	Update defconfigs	commit \| commitdiff \| tree
2019-11-29	Alexander Popov	RANDOMIZE_BASE is now enabled by default on arm64	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	x86_32: INTEL_IOMMU is not enabled by default - fix...	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	X86_INTEL_UMIP is now X86_UMIP	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	x86_64: more hardening options are enabled by default...	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Improve the list of the kernel parameters in TODO	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Add CLIP OS links	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Update the column width	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Some of my recommendations are used by CLIP OS, change...	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Don't recommend disabling IKCONFIG anymore	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Save more hardening sysctls for TODO	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Update CLIP OS doc	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Group security policies together	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Add INIT_ON_ALLOC_DEFAULT_ON and INIT_ON_FREE_DEFAULT_ON...	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Add RODATA_FULL_DEFAULT_ENABLED for ARM64	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Add info about Debian and AOSP kernel configs to links.txt	commit \| commitdiff \| tree
2019-11-28	Alexander Popov	Add Debian Buster kernel config	commit \| commitdiff \| tree
next

kconfig-hardened-check

RSS Atom