projects / kconfig-hardened-check.git / shortlog
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
kconfig-hardened-check.git
2023-12-02 Alexander PopovKeep the recommendation to disable kernel modules commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-02 Alexander PopovAdd a comment about 'kernel.modules_disabled' commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-02 Alexander Popovadd --kernel-version option (#94) commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-01 Fabrice Fontaineadd --kernel-version option 94/head commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-18 Alexander PopovFix the reason for the 'kernel.yama.ptrace_scope' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd kspp-recommendations/kspp-sysctl.txt commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovFix the reason for the nosmt check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovUpdate kspp-cmdline-x86-64.txt commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'dev.tty.legacy_tiocsti' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'kernel.randomize_va_space' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'fs.suid_dumpable' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovChange the reason of the COREDUMP check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'fs.protected_regular' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'fs.protected_fifos' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'fs.protected_hardlinks' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'fs.protected_symlinks' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'vm.unprivileged_userfaultfd' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'kernel.yama.ptrace_scope' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'kernel.kptr_restrict' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovImprove the slab_common.usercopy_fallback check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander Popovhardened_usercopy=1 is now officially recommended by... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-16 Alexander PopovEnabling page_alloc.shuffle is now recommended by KSPP commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-16 Alexander Popov'mitigations=auto,nosmt' is now recommended by KSPP commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-16 Alexander PopovDisabling X86_VSYSCALL_EMULATION is now recommended... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-16 Alexander PopovUse /usr/bin/env in shebangs (#90) commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-05 Sandro JäckelUse /usr/bin/env in shebangs 90/head commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-04 Alexander PopovDrop ZERO_CALL_USED_REGS in favour of backward-edge CFI commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-18 Alexander PopovUpdate the README commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-18 Alexander PopovRefactor the assertion in colorize_result() to improve... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-17 Alexander PopovUpdate the backup in issues.md commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-17 Alexander PopovRename kconfig-hardened-check into kernel-hardening... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-17 Alexander PopovRenaming fixes renaming 85/head commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-17 Alexander PopovDrop default.nix (it contains a wrong utility name... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-17 Alexander Popovkconfig-hardened-check -> kernel-hardening-checker commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-17 Alexander Popovtest_engine: add test_complex_nested() commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-17 Alexander Popovtest_engine: improve the output commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-16 Alexander Popovtest_engine: improve the test_stdout() commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-16 Alexander Popovtest_engine: refactor test_complex_or() and test_comple... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-13 Alexander PopovDon't remove ANSI colors, adapt the testcases instead commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-13 Alexander PopovAdd colors to output (#86) commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-12 FrakAdjust test scripts to scrub ANSI colors from output 86/head commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-11 FrakFix pylints and verbose/None case commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-10 Frakfix typo commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-10 Frakcleanup spaces commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-09 Frakcleanup commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-09 Frakre-factoring commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-09 FrakAdd colors for OK and FAIL cases commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-03 Alexander PopovFix arch conditions for some CmdlineChecks commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-28 Alexander PopovMake the functional tests more informative commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-28 Alexander PopovTest more wrong combinations of options commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-28 Alexander PopovTest checking sysctl separately commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-27 Alexander PopovSupport separate sysctl checking (without kconfig) commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-14 Alexander PopovImprove coverage of the functional test a bit commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-14 Alexander PopovClean .gitignore commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-14 Alexander PopovShow git information in the functional test commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-14 Alexander PopovTest an invalid sysctl file commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-14 Alexander PopovTest an unexpected line in the sysctl file commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-14 Alexander PopovTest an unexpected line in the Kconfig file commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-14 Alexander PopovDrop `if __name__ == "__main__"` from ./bin/kconfig... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-14 Alexander PopovTurn the warning about unexpected line in Kconfig file... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-14 Alexander PopovUpdate the README (add the --sysctl mode) commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-13 Alexander PopovAdd the Kconfig file of Fedora 38 commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-13 Alexander PopovUse example_sysctls.txt in the functional test commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-13 Alexander PopovAdd an example sysctl output file commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-13 Alexander PopovAdd the / symbol to the sysctl parsing pattern commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-13 Alexander PopovAdd --sysctl to functional testing commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-13 Alexander PopovImprove checking the combinations of flags in the funct... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-13 Alexander PopovFix syntax to run on the Woodpecker 1.0.0 CI (part II) commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-13 Alexander PopovFix syntax to run on the Woodpecker 1.0.0 CI commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-13 Alexander PopovReport that --print and --generate can't be used together commit | commitdiff | tree | snapshot (zip tar.gz)
2023-08-13 Alexander PopovEnable sysctl checking commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-23 Alexander PopovCheck the kernel.unprivileged_bpf_disabled sysctl commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-23 Alexander PopovCheck the dev.tty.ldisc_autoload sysctl commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-23 Alexander PopovCheck the user.max_user_namespaces sysctl commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-23 Alexander PopovCheck the kernel.kexec_load_disabled sysctl commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-23 Alexander PopovCheck the kernel.perf_event_paranoid sysctl commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-23 Alexander PopovCheck the kernel.dmesg_restrict sysctl commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-23 Alexander PopovCheck the net.core.bpf_jit_harden sysctl commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-23 Alexander Popovtest_engine: use SysctlCheck in test_value_overriding() commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-23 Alexander Popovtest_engine: use SysctlCheck in test_stdout() commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-23 Alexander Popovtest_engine: implement test_simple_sysctl() commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-23 Alexander Popovtest_engine: support SysctlCheck commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-22 Alexander PopovRefactor populate_opt_with_data() commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-16 Alexander PopovMute warnings in the JSON mode and improve wording commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-16 Alexander PopovImplement parse_sysctl_file() commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-15 Alexander PopovDrop an obsolete error handling test commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-15 Alexander PopovFix the bug in the functional tests commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-15 Alexander PopovEmit WARNING for the cmdline options that exist multipl... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-15 Alexander PopovPrecise the Kconfig parsing commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-12 Alexander PopovGet rid of useless regular expressions in detect_compiler() commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-12 Alexander PopovPrecise the regular expressions in detect_arch() and... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-12 Alexander PopovShow error if some cmdline option exists multiple times commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-08 Alexander PopovAdd the basic infrastructure for checking sysctl commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-08 Alexander PopovIntroduce the SysctlCheck class commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-04 Alexander PopovCheck disabling XFS_SUPPORT_V4 for cutting attack surface commit | commitdiff | tree | snapshot (zip tar.gz)
2023-07-02 Alexander PopovPrint the microarchitecture in --generate mode commit | commitdiff | tree | snapshot (zip tar.gz)
2023-06-25 Alexander PopovUpdate the README commit | commitdiff | tree | snapshot (zip tar.gz)
2023-06-25 Alexander PopovAdd the info about /proc/cmdline to the usage help commit | commitdiff | tree | snapshot (zip tar.gz)
2023-06-18 Alexander Popovsetup: fix "The license_file parameter is deprecated" commit | commitdiff | tree | snapshot (zip tar.gz)
2023-06-18 Alexander Popovsetup: Don't use the automatic "find_namespace:" discovery commit | commitdiff | tree | snapshot (zip tar.gz)
next
kconfig-hardened-check