projects / kconfig-hardened-check.git / shortlog
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
kconfig-hardened-check.git
2024-03-11 Alexander PopovImprove the DEBUG_CREDENTIALS check commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-10 Alexander PopovFix the false result of the REFCOUNT_FULL check for... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-09 Alexander PopovHave to revert codecov back to v3 commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-09 Alexander PopovUpdate codecov-action commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-09 Alexander PopovAdapt test_version() in the unittest commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-09 Alexander PopovCheck all 3 numbers of the kernel version in VersionCheck commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-09 Alexander PopovFix the fresh set_state() bug found by unittest commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-09 Alexander PopovMake `python -m unittest` show the whole output commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-09 Alexander PopovUpdate github actions commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-09 Alexander PopovImplement the set_state() method of the check classes commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-09 Alexander PopovUse 3 numbers in the VersionCheck constructor commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-09 Alexander PopovParse all numbers of the kernel version commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-09 Alexander PopovSkip the kernel version part after '-' commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-04 Alexander PopovAdd the ia32_emulation check commit | commitdiff | tree | snapshot (zip tar.gz)
2024-02-19 Alexander PopovAdd MODULE_SIG_SHA3_512 as a valid option commit | commitdiff | tree | snapshot (zip tar.gz)
2024-02-17 Alexander PopovMake LOCKDOWN_LSM 'self_protection', not 'security_policy' commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-16 Alexander PopovReady for the release 0.6.6 v0.6.6 commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-16 Alexander PopovUpdate issues.md commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-16 Alexander PopovUpdate the README commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-16 Alexander PopovUpdate the Ubuntu example configs commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-16 Alexander PopovDon't print the warning about ARCH_MMAP_RND_BITS in... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-16 Alexander PopovImprove the check of DEBUG_NOTIFIERS feature (part 2) commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-16 Alexander PopovImprove the check of DEBUG_NOTIFIERS feature commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-16 Alexander PopovImprove the check of SCHED_STACK_END_CHECK. commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-16 Alexander PopovFix style (III) commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-16 Alexander PopovFix style (II) commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-16 Alexander PopovFix style (I) commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-16 Alexander PopovDisable pylint too-many-locals, it's not useful for... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-16 Alexander PopovFix pylint W0613: Unused argument 'arch' commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-16 Alexander PopovFix pylint E1101: Instance of 'OptCheck' has no 'type... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-16 Alexander PopovFix pylint W0613: Unused argument 'mode' commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-15 Alexander PopovUpdate the NixOS configs commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-14 Alexander PopovDon't add options without explicitly recommended values... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-01-14 Alexander PopovUBSAN_SANITIZE_ALL is now available for ARM commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-30 Alexander PopovFix the order in the vdso32 check (part II) commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-30 Alexander PopovFix the order in the vdso32 check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-30 Alexander PopovImprove the hackish refinement of the CONFIG_ARCH_MMAP_... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-30 Alexander PopovShow the option type in print_unknown_options() commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-30 Alexander PopovUse raw strings for regular expression commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-30 Alexander PopovFix the 'decision' for the 'AIO' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-29 Alexander PopovFix the 'decision' for the 'vdso32' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-29 Alexander PopovImprove the comment for the 'slab_common.usercopy_fallb... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-28 Alexander PopovFix the arch condition for the SCHED_CORE check (III) commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-28 Alexander PopovUpdate the KSPP recommendations commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-28 Alexander PopovFix the arch for the CPU_SRSO check (it's available... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-28 Alexander PopovSplit the HW_RANDOM_TPM check (it's enabled by default... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-28 Alexander PopovChange the 'decision' of the INIT_STACK_ALL_ZERO check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-17 Alexander PopovAdd defconfigs for Linux v6.6 commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-16 Alexander PopovAdd the RANDOM_KMALLOC_CACHES check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-16 Alexander PopovAdd the SECURITY_SELINUX_DEBUG check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-16 Alexander PopovFix the 'decision' for the LEGACY_TIOCSTI check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-16 Alexander PopovAdd the CONFIG_LIST_HARDENED check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-09 Alexander PopovAdd the gather_data_sampling check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-09 Alexander PopovAdd the CPU_SRSO check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-09 Alexander PopovAdd the SPECULATION_MITIGATIONS check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-09 Alexander PopovAdd the spec_rstack_overflow check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-09 Alexander PopovAdd the MODULE_FORCE_LOAD check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-02 Alexander PopovUpdate the README commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-02 Alexander PopovAdd the check for dis_ucode_ldr commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-02 Alexander PopovAdd the MICROCODE_INTEL and MICROCODE_AMD checks commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-02 Alexander PopovAdd a check for the 'kfence.sample_interval' boot parameter commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-02 Alexander PopovAdd the KFENCE_SAMPLE_INTERVAL check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-02 Alexander PopovKeep the recommendation to disable kernel modules commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-02 Alexander PopovAdd a comment about 'kernel.modules_disabled' commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-02 Alexander Popovadd --kernel-version option (#94) commit | commitdiff | tree | snapshot (zip tar.gz)
2023-12-01 Fabrice Fontaineadd --kernel-version option 94/head commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-18 Alexander PopovFix the reason for the 'kernel.yama.ptrace_scope' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd kspp-recommendations/kspp-sysctl.txt commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovFix the reason for the nosmt check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovUpdate kspp-cmdline-x86-64.txt commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'dev.tty.legacy_tiocsti' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'kernel.randomize_va_space' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'fs.suid_dumpable' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovChange the reason of the COREDUMP check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'fs.protected_regular' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'fs.protected_fifos' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'fs.protected_hardlinks' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'fs.protected_symlinks' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'vm.unprivileged_userfaultfd' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'kernel.yama.ptrace_scope' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovAdd the 'kernel.kptr_restrict' check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander PopovImprove the slab_common.usercopy_fallback check commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-17 Alexander Popovhardened_usercopy=1 is now officially recommended by... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-16 Alexander PopovEnabling page_alloc.shuffle is now recommended by KSPP commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-16 Alexander Popov'mitigations=auto,nosmt' is now recommended by KSPP commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-16 Alexander PopovDisabling X86_VSYSCALL_EMULATION is now recommended... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-16 Alexander PopovUse /usr/bin/env in shebangs (#90) commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-05 Sandro JäckelUse /usr/bin/env in shebangs 90/head commit | commitdiff | tree | snapshot (zip tar.gz)
2023-10-04 Alexander PopovDrop ZERO_CALL_USED_REGS in favour of backward-edge CFI commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-18 Alexander PopovUpdate the README commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-18 Alexander PopovRefactor the assertion in colorize_result() to improve... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-17 Alexander PopovUpdate the backup in issues.md commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-17 Alexander PopovRename kconfig-hardened-check into kernel-hardening... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-17 Alexander PopovRenaming fixes renaming 85/head commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-17 Alexander PopovDrop default.nix (it contains a wrong utility name... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-17 Alexander Popovkconfig-hardened-check -> kernel-hardening-checker commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-17 Alexander Popovtest_engine: add test_complex_nested() commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-17 Alexander Popovtest_engine: improve the output commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-16 Alexander Popovtest_engine: improve the test_stdout() commit | commitdiff | tree | snapshot (zip tar.gz)
2023-09-16 Alexander Popovtest_engine: refactor test_complex_or() and test_comple... commit | commitdiff | tree | snapshot (zip tar.gz)
next
kconfig-hardened-check