projects / kconfig-hardened-check.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
Add ARM64_PTR_AUTH check
2019-03-13 Alexander PopovAdd ARM64_PTR_AUTH check
 commit | commitdiff | tree
2019-03-13 Alexander PopovAdd STACKPROTECTOR_PER_TASK check for ARM
 commit | commitdiff | tree
2019-03-13 Alexander PopovAdd defconfigs for 5.0
 commit | commitdiff | tree
2019-03-12 Alexander PopovDon't hide AND check results if the requirements are...
commit | commitdiff | tree
2019-03-12 Alexander PopovUpdate the README
 commit | commitdiff | tree
2019-03-12 Alexander PopovImprove the final result output
 commit | commitdiff | tree
2019-03-12 Alexander PopovUse the AND check for HARDENED_USERCOPY_FALLBACK
 commit | commitdiff | tree
2019-03-12 Alexander PopovUse the AND check for PAGE_POISONING_NO_SANITY and...
commit | commitdiff | tree
2019-03-12 Alexander PopovImplement AND ComplexOptCheck
 commit | commitdiff | tree
2019-03-12 Alexander PopovAdd a sanity check and do minor refactoring
 commit | commitdiff | tree
2019-03-12 Alexander PopovIntroduce the ComplexOptCheck superclass
 commit | commitdiff | tree
2019-03-11 Alexander PopovUpdate the README
 commit | commitdiff | tree
2019-03-11 Alexander PopovAdd explicit checks for CONFIG_MODULES and CONFIG_DEVMEM
 commit | commitdiff | tree
2019-03-11 Alexander PopovAdd missing OR use case
 commit | commitdiff | tree
2019-03-11 Alexander PopovImprove the output of OR checks
 commit | commitdiff | tree
2019-03-04 Alexander PopovAdd the RESET_ATTACK_MITIGATION check according to...
commit | commitdiff | tree
2019-03-04 Alexander PopovFix false positive about CONFIG_MODULE_SIG_FORCE.
 commit | commitdiff | tree
2019-01-24 Alexander PopovUpdate the README and comments after adding ARM support
 commit | commitdiff | tree
2019-01-24 Alexander PopovFix typo in KSPP recommendations for ARM
 commit | commitdiff | tree
2019-01-24 Alexander PopovAdd ARM support
 commit | commitdiff | tree
2019-01-23 Alexander PopovUpdate the README after adding ARM64 support
 commit | commitdiff | tree
2019-01-23 Alexander PopovGo through all the checks in debug mode
 commit | commitdiff | tree
2019-01-23 Alexander PopovAdd ARM64 support
 commit | commitdiff | tree
2019-01-22 Alexander PopovUpdate the README after adding X86_32 support
 commit | commitdiff | tree
2019-01-22 Alexander PopovAdd X86_32 support
 commit | commitdiff | tree
2019-01-22 Alexander PopovMerge branch 'arch-configs'
 commit | commitdiff | tree
2019-01-22 Alexander PopovCreate a separate directory for distro configs
 commit | commitdiff | tree
2019-01-22 Alexander PopovCreate a separate directory for defconfigs
 commit | commitdiff | tree
2019-01-22 Alexander PopovAdd arm64 defconfig for v4.20
 commit | commitdiff | tree
2019-01-22 Alexander PopovAdd arm defconfig for v4.20
 commit | commitdiff | tree
2019-01-22 Alexander PopovAdd x86_32 defconfig for v4.20
 commit | commitdiff | tree
2019-01-22 Alexander PopovCreate a separate directory for KSPP recommendations
 commit | commitdiff | tree
2019-01-22 Alexander PopovSpecify the architecture in KSPP recommendations
 commit | commitdiff | tree
2019-01-21 Alexander PopovUpdate the README (arch support)
 commit | commitdiff | tree
2019-01-21 Alexander PopovMake the script aware of target architecture
 commit | commitdiff | tree
2019-01-21 Alexander PopovMerge branch 'from-tyhicks-1'
 commit | commitdiff | tree
2019-01-14 Alexander PopovAdd x86_64_defconfig for v4.20
 commit | commitdiff | tree
2019-01-14 Alexander PopovMerge branch 'decision-cleanup'
 commit | commitdiff | tree
2019-01-14 Alexander PopovUpdate README
 commit | commitdiff | tree
2019-01-14 Alexander PopovChange the last 'ubuntu18' checks (about lockdown)
 commit | commitdiff | tree
2019-01-14 Alexander PopovChange 'decision' to 'grsecurity' for their additional...
commit | commitdiff | tree
2019-01-14 Alexander PopovChange 'decision' to 'kspp' for non-default options...
commit | commitdiff | tree
2019-01-14 Alexander PopovChange 'decision' to 'defconfig' for hardening features...
commit | commitdiff | tree
2018-12-21 Alexander PopovAdd kernel command line options enabling mitigations...
commit | commitdiff | tree
2018-12-12 Alexander PopovAdd TODO (hardening preferences for ARM) and update...
commit | commitdiff | tree
2018-12-12 Alexander PopovCheck x86 hardening features: X86_SMAP and X86_INTEL_UMIP
 commit | commitdiff | tree
2018-12-12 Alexander PopovAdd SECURITY_LOADPIN check
 commit | commitdiff | tree
2018-12-12 Alexander PopovAdd SLAB_MERGE_DEFAULT check
 commit | commitdiff | tree
2018-12-12 Alexander PopovMention net.core.bpf_jit_harden
 commit | commitdiff | tree
2018-12-12 Alexander PopovRecommend slub_debug=FZP
 commit | commitdiff | tree
2018-12-07 Alexander PopovMark options connected with CONFIG_LOCK_DOWN_KERNEL...
commit | commitdiff | tree
2018-12-07 Alexander PopovAdd CONFIG_LOCK_DOWN_KERNEL
 commit | commitdiff | tree
2018-12-05 Alexander PopovAdd a hint about gcc plugins support
 commit | commitdiff | tree
2018-08-08 Alexander PopovMerge branch 'from-hackurx-3'
 commit | commitdiff | tree
2018-08-08 Alexander PopovMove kspp-recommendations.config to config_files
 commit | commitdiff | tree
2018-08-08 Alexander PopovAdd missing configs
 commit | commitdiff | tree
2018-08-08 Alexander PopovFix links to configs
 commit | commitdiff | tree
2018-08-08 Alexander PopovUpdate UEK config
 commit | commitdiff | tree
2018-07-30 Alexander PopovMinor fixes for the script output
 commit | commitdiff | tree
2018-07-30 Alexander PopovMerge branch 'from-iad42-1'
 commit | commitdiff | tree
2018-07-30 Alexander PopovAnd update README
 commit | commitdiff | tree
2018-07-30 Alexander PopovAdd DEBUG_RODATA as old alternative to STRICT_KERNEL_RWX
 commit | commitdiff | tree
2018-07-30 Alexander PopovAlign lines better
 commit | commitdiff | tree
2018-07-30 Alexander PopovAdd DEBUG_SET_MODULE_RONX as old alternative to STRICT_MODUL...
commit | commitdiff | tree
2018-07-30 Alexander PopovUpdate the README (LKDTM is commented out)
 commit | commitdiff | tree
2018-07-30 Alexander PopovUpdate the function names according to the new meaning
 commit | commitdiff | tree
2018-07-27 Alexander PopovMerge branch 'from-hackurx-2'
 commit | commitdiff | tree
2018-07-27 Alexander PopovComment out LKDTM
 commit | commitdiff | tree
2018-07-25 Alexander PopovAvoid false positive errors if CONFIG_MODULES is not set
 commit | commitdiff | tree
2018-07-25 Alexander PopovSupport both versions of the STACKPROTECTOR_STRONG...
commit | commitdiff | tree
2018-07-24 Alexander PopovMerge branch 'OR-from-anthraxx'
 commit | commitdiff | tree
2018-07-24 Alexander PopovUpdate the README
 commit | commitdiff | tree
2018-07-24 Alexander PopovImprove the OR result calculation
 commit | commitdiff | tree
2018-07-24 Alexander PopovAdjust the output format
 commit | commitdiff | tree
2018-07-24 Alexander PopovAdd the comment describing OR use case
 commit | commitdiff | tree
2018-07-24 Alexander PopovOR needs OptCheck.check() return values
 commit | commitdiff | tree
2018-07-20 Alexander PopovUpdate usage in README.md
 commit | commitdiff | tree
2018-07-20 Alexander PopovMerge branch 'from-hackurx-1'
 commit | commitdiff | tree
2018-07-20 Alexander PopovMerge branch 'arch-changes-from-anthraxx'
 commit | commitdiff | tree
2018-07-20 Alexander PopovCount errors in the end
 commit | commitdiff | tree
2018-07-20 Alexander PopovRename 'opt_list' as well
 commit | commitdiff | tree
2018-07-20 Alexander PopovDon't return the result from Opt.check(), we don't...
commit | commitdiff | tree
2018-07-20 Alexander PopovPlease forgive me, I fear lambdas :\
 commit | commitdiff | tree
2018-07-20 Alexander PopovDebug mode output should be printed before the final...
commit | commitdiff | tree
2018-07-20 Alexander PopovFix the output: ERROR, not BUG
 commit | commitdiff | tree
2018-07-20 Alexander PopovRename check_state() according the new meaning
 commit | commitdiff | tree
2018-07-20 Alexander PopovFix the check against multiple options in config file
 commit | commitdiff | tree
2018-07-20 Alexander PopovUse None as state of the options which are not found
 commit | commitdiff | tree
2018-07-20 Alexander PopovDrop assertions which are now useless
 commit | commitdiff | tree
2018-07-13 Alexander PopovArgumentParser: drop unneeded default=False for args...
commit | commitdiff | tree
2018-07-13 Alexander PopovArgumentParser: Improve description
 commit | commitdiff | tree
2018-07-05 Alexander PopovConsider 'not found' as an equivalent of 'is not set'
 commit | commitdiff | tree
2018-07-05 Alexander PopovAdd rules for options disabled by grsecurity
 commit | commitdiff | tree
2018-07-04 Alexander PopovMove some features to 'cut_attack_surface' category
 commit | commitdiff | tree
2018-07-04 Alexander PopovMore decisions on kernel options
 commit | commitdiff | tree
2018-07-03 Alexander PopovAdd Oracle Unbreakable Enterprise Kernel 5 (UEK-5)...
commit | commitdiff | tree
2018-06-22 Alexander PopovDrop CONFIG_DEBUG_KERNEL from kspp-recommendations...
commit | commitdiff | tree
2018-06-20 Alexander PopovDisable buggy IP_SCTP to cut attack surface
 commit | commitdiff | tree
2018-06-20 Alexander PopovDisable only CONFIG_USER_NS, not whole CONFIG_NAMESPACES
Signed-off-by: Alexander Popov <alex.popov@linux.com>
 commit | commitdiff | tree
2018-06-20 Alexander PopovAdd kconfig-hardened-check.py
Signed-off-by: Alexander Popov <alex.popov@linux.com>
 commit | commitdiff | tree
kconfig-hardened-check