jxself.org public git repositories - kconfig-hardened-check.git/search

projects / kconfig-hardened-check.git / search

2019-03-12	Alexander Popov	Use the AND check for HARDENED_USERCOPY_FALLBACK	commit \| commitdiff \| tree
2019-03-12	Alexander Popov	Use the AND check for PAGE_POISONING_NO_SANITY and...	commit \| commitdiff \| tree
2019-03-12	Alexander Popov	Implement AND ComplexOptCheck	commit \| commitdiff \| tree
2019-03-12	Alexander Popov	Add a sanity check and do minor refactoring	commit \| commitdiff \| tree
2019-03-12	Alexander Popov	Introduce the ComplexOptCheck superclass	commit \| commitdiff \| tree
2019-03-11	Alexander Popov	Update the README	commit \| commitdiff \| tree
2019-03-11	Alexander Popov	Add explicit checks for CONFIG_MODULES and CONFIG_DEVMEM	commit \| commitdiff \| tree
2019-03-11	Alexander Popov	Add missing OR use case	commit \| commitdiff \| tree
2019-03-11	Alexander Popov	Improve the output of OR checks	commit \| commitdiff \| tree
2019-03-04	Alexander Popov	Add the RESET_ATTACK_MITIGATION check according to...	commit \| commitdiff \| tree
2019-03-04	Alexander Popov	Fix false positive about CONFIG_MODULE_SIG_FORCE.	commit \| commitdiff \| tree
2019-01-24	Alexander Popov	Update the README and comments after adding ARM support	commit \| commitdiff \| tree
2019-01-24	Alexander Popov	Fix typo in KSPP recommendations for ARM	commit \| commitdiff \| tree
2019-01-24	Alexander Popov	Add ARM support	commit \| commitdiff \| tree
2019-01-23	Alexander Popov	Update the README after adding ARM64 support	commit \| commitdiff \| tree
2019-01-23	Alexander Popov	Go through all the checks in debug mode	commit \| commitdiff \| tree
2019-01-23	Alexander Popov	Add ARM64 support	commit \| commitdiff \| tree
2019-01-22	Alexander Popov	Update the README after adding X86_32 support	commit \| commitdiff \| tree
2019-01-22	Alexander Popov	Add X86_32 support	commit \| commitdiff \| tree
2019-01-22	Alexander Popov	Merge branch 'arch-configs'	commit \| commitdiff \| tree
2019-01-22	Alexander Popov	Create a separate directory for distro configs	commit \| commitdiff \| tree
2019-01-22	Alexander Popov	Create a separate directory for defconfigs	commit \| commitdiff \| tree
2019-01-22	Alexander Popov	Add arm64 defconfig for v4.20	commit \| commitdiff \| tree
2019-01-22	Alexander Popov	Add arm defconfig for v4.20	commit \| commitdiff \| tree
2019-01-22	Alexander Popov	Add x86_32 defconfig for v4.20	commit \| commitdiff \| tree
2019-01-22	Alexander Popov	Create a separate directory for KSPP recommendations	commit \| commitdiff \| tree
2019-01-22	Alexander Popov	Specify the architecture in KSPP recommendations	commit \| commitdiff \| tree
2019-01-21	Alexander Popov	Update the README (arch support)	commit \| commitdiff \| tree
2019-01-21	Alexander Popov	Make the script aware of target architecture	commit \| commitdiff \| tree
2019-01-21	Alexander Popov	Merge branch 'from-tyhicks-1'	commit \| commitdiff \| tree
2019-01-14	Alexander Popov	Add x86_64_defconfig for v4.20	commit \| commitdiff \| tree
2019-01-14	Alexander Popov	Merge branch 'decision-cleanup'	commit \| commitdiff \| tree
2019-01-14	Alexander Popov	Update README	commit \| commitdiff \| tree
2019-01-14	Alexander Popov	Change the last 'ubuntu18' checks (about lockdown)	commit \| commitdiff \| tree
2019-01-14	Alexander Popov	Change 'decision' to 'grsecurity' for their additional...	commit \| commitdiff \| tree
2019-01-14	Alexander Popov	Change 'decision' to 'kspp' for non-default options...	commit \| commitdiff \| tree
2019-01-14	Alexander Popov	Change 'decision' to 'defconfig' for hardening features...	commit \| commitdiff \| tree
2018-12-21	Alexander Popov	Add kernel command line options enabling mitigations...	commit \| commitdiff \| tree
2018-12-12	Alexander Popov	Add TODO (hardening preferences for ARM) and update...	commit \| commitdiff \| tree
2018-12-12	Alexander Popov	Check x86 hardening features: X86_SMAP and X86_INTEL_UMIP	commit \| commitdiff \| tree
2018-12-12	Alexander Popov	Add SECURITY_LOADPIN check	commit \| commitdiff \| tree
2018-12-12	Alexander Popov	Add SLAB_MERGE_DEFAULT check	commit \| commitdiff \| tree
2018-12-12	Alexander Popov	Mention net.core.bpf_jit_harden	commit \| commitdiff \| tree
2018-12-12	Alexander Popov	Recommend slub_debug=FZP	commit \| commitdiff \| tree
2018-12-07	Alexander Popov	Mark options connected with CONFIG_LOCK_DOWN_KERNEL...	commit \| commitdiff \| tree
2018-12-07	Alexander Popov	Add CONFIG_LOCK_DOWN_KERNEL	commit \| commitdiff \| tree
2018-12-05	Alexander Popov	Add a hint about gcc plugins support	commit \| commitdiff \| tree
2018-08-08	Alexander Popov	Merge branch 'from-hackurx-3'	commit \| commitdiff \| tree
2018-08-08	Alexander Popov	Move kspp-recommendations.config to config_files	commit \| commitdiff \| tree
2018-08-08	Alexander Popov	Add missing configs	commit \| commitdiff \| tree
2018-08-08	Alexander Popov	Fix links to configs	commit \| commitdiff \| tree
2018-08-08	Alexander Popov	Update UEK config	commit \| commitdiff \| tree
2018-07-30	Alexander Popov	Minor fixes for the script output	commit \| commitdiff \| tree
2018-07-30	Alexander Popov	Merge branch 'from-iad42-1'	commit \| commitdiff \| tree
2018-07-30	Alexander Popov	And update README	commit \| commitdiff \| tree
2018-07-30	Alexander Popov	Add DEBUG_RODATA as old alternative to STRICT_KERNEL_RWX	commit \| commitdiff \| tree
2018-07-30	Alexander Popov	Align lines better	commit \| commitdiff \| tree
2018-07-30	Alexander Popov	Add DEBUG_SET_MODULE_RONX as old alternative to STRICT_MODUL...	commit \| commitdiff \| tree
2018-07-30	Alexander Popov	Update the README (LKDTM is commented out)	commit \| commitdiff \| tree
2018-07-30	Alexander Popov	Update the function names according to the new meaning	commit \| commitdiff \| tree
2018-07-27	Alexander Popov	Merge branch 'from-hackurx-2'	commit \| commitdiff \| tree
2018-07-27	Alexander Popov	Comment out LKDTM	commit \| commitdiff \| tree
2018-07-25	Alexander Popov	Avoid false positive errors if CONFIG_MODULES is not set	commit \| commitdiff \| tree
2018-07-25	Alexander Popov	Support both versions of the STACKPROTECTOR_STRONG...	commit \| commitdiff \| tree
2018-07-24	Alexander Popov	Merge branch 'OR-from-anthraxx'	commit \| commitdiff \| tree
2018-07-24	Alexander Popov	Update the README	commit \| commitdiff \| tree
2018-07-24	Alexander Popov	Improve the OR result calculation	commit \| commitdiff \| tree
2018-07-24	Alexander Popov	Adjust the output format	commit \| commitdiff \| tree
2018-07-24	Alexander Popov	Add the comment describing OR use case	commit \| commitdiff \| tree
2018-07-24	Alexander Popov	OR needs OptCheck.check() return values	commit \| commitdiff \| tree
2018-07-20	Alexander Popov	Update usage in README.md	commit \| commitdiff \| tree
2018-07-20	Alexander Popov	Merge branch 'from-hackurx-1'	commit \| commitdiff \| tree
2018-07-20	Alexander Popov	Merge branch 'arch-changes-from-anthraxx'	commit \| commitdiff \| tree
2018-07-20	Alexander Popov	Count errors in the end	commit \| commitdiff \| tree
2018-07-20	Alexander Popov	Rename 'opt_list' as well	commit \| commitdiff \| tree
2018-07-20	Alexander Popov	Don't return the result from Opt.check(), we don't...	commit \| commitdiff \| tree
2018-07-20	Alexander Popov	Please forgive me, I fear lambdas :\	commit \| commitdiff \| tree
2018-07-20	Alexander Popov	Debug mode output should be printed before the final...	commit \| commitdiff \| tree
2018-07-20	Alexander Popov	Fix the output: ERROR, not BUG	commit \| commitdiff \| tree
2018-07-20	Alexander Popov	Rename check_state() according the new meaning	commit \| commitdiff \| tree
2018-07-20	Alexander Popov	Fix the check against multiple options in config file	commit \| commitdiff \| tree
2018-07-20	Alexander Popov	Use None as state of the options which are not found	commit \| commitdiff \| tree
2018-07-20	Alexander Popov	Drop assertions which are now useless	commit \| commitdiff \| tree
2018-07-13	Alexander Popov	ArgumentParser: drop unneeded default=False for args...	commit \| commitdiff \| tree
2018-07-13	Alexander Popov	ArgumentParser: Improve description	commit \| commitdiff \| tree
2018-07-05	Alexander Popov	Consider 'not found' as an equivalent of 'is not set'	commit \| commitdiff \| tree
2018-07-05	Alexander Popov	Add rules for options disabled by grsecurity	commit \| commitdiff \| tree
2018-07-04	Alexander Popov	Move some features to 'cut_attack_surface' category	commit \| commitdiff \| tree
2018-07-04	Alexander Popov	More decisions on kernel options	commit \| commitdiff \| tree
2018-07-03	Alexander Popov	Add Oracle Unbreakable Enterprise Kernel 5 (UEK-5)...	commit \| commitdiff \| tree
2018-06-22	Alexander Popov	Drop CONFIG_DEBUG_KERNEL from kspp-recommendations...	commit \| commitdiff \| tree
2018-06-20	Alexander Popov	Disable buggy IP_SCTP to cut attack surface	commit \| commitdiff \| tree
2018-06-20	Alexander Popov	Disable only CONFIG_USER_NS, not whole CONFIG_NAMESPACES Signed-off-by: Alexander Popov <alex.popov@linux.com>	commit \| commitdiff \| tree
2018-06-20	Alexander Popov	Add kconfig-hardened-check.py Signed-off-by: Alexander Popov <alex.popov@linux.com>	commit \| commitdiff \| tree

kconfig-hardened-check

RSS Atom