projects / kconfig-hardened-check.git / shortlog
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
kconfig-hardened-check.git
2023-01-21 Alexander PopovAdd the check for the 'kvm.nx_huge_pages' cmdline parameter commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-21 Alexander PopovAdd the check for the slub_merge cmdline parameter commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-21 Alexander PopovRename the file with the KSPP cmdline recommendations... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-21 Alexander PopovClean up the comments commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-21 Alexander PopovAdd the check for the iommu cmdline option commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-21 Alexander PopovAdd the KSPP cmdline recommendations for x86_64 commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-21 Alexander PopovInclude parsed_cmdline_options in the print_unknown_opt... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-21 Alexander PopovRename the files with the KSPP recommendations commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-19 Alexander PopovDrop get-nix-kconfig.py (`nix-build get-nixos-kconfig... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-19 Alexander PopovAdd the NixOS kernel configs commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-19 Alexander PopovMerge branch 'from-o8opi-2' commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-15 Alexander PopovUpdate the VMAP_STACK check: it is available for ARM commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-15 Alexander PopovFix the arch condition for the SCHED_CORE check (II) commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-14 Alexander PopovUpdate the KSPP recommendations commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-14 Alexander PopovFix the IOMMU_DEFAULT_DMA_STRICT check: it is in defcon... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-14 Alexander PopovAdd the COMPAT and X86_X32_ABI checks commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-14 Alexander PopovFix the WERROR check: it is in defconfig for X86_64... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-14 Alexander PopovFix the DEBUG_WX check: it is in defconfig for X86_64... commit | commitdiff | tree | snapshot (zip tar.gz)
2023-01-13 Alexander PopovAdd defconfigs for Linux v6.1 commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-29 o8opiadd get-nixos-kconfig nix script 77/head commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-26 Alexander PopovAdd the repository mirrors 64/head commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-25 Alexander PopovBackup the pull requests and issues into a Markdown... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-16 Alexander PopovRemove the AIO check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-10 Alexander PopovRemember about the nosmt sysfs control file commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-10 Alexander PopovDrop the comment about mitigations of CPU vulnerabilities commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-10 Alexander PopovSave the list of disabled mitigations of CPU vulnerabil... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-10 Alexander PopovAdd the nospectre_bhb check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-10 Alexander PopovAdd the kpti check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-10 Alexander PopovCompare against '0' in the 'is not off' check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-10 Alexander PopovAdd the tsx check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-10 Alexander PopovChange the 'decision' of X86_INTEL_TSX_MODE_OFF check... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-10 Alexander PopovAdd the nomte check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-10 Alexander PopovAdd the nopauth check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-10 Alexander PopovAdd the nobti check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-09 Alexander PopovAdd the sysrq_always_enabled check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-09 Alexander PopovAdd the ssbd check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-08 Alexander PopovAvoid the YAML parsing mistake commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-08 Alexander PopovFix `python-version` in the GitHub Actions commit | commitdiff | tree | snapshot (zip tar.gz)
2022-12-08 Alexander PopovReorder some checks, no functional changes commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-17 Alexander PopovAdd the srbds check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-17 Alexander PopovAdd the retbleed check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-17 Alexander PopovAdd the mmio_stale_data check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-17 Alexander PopovAdd the tsx_async_abort check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-17 Alexander PopovAdd the mds check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-17 Alexander PopovAdd the l1tf check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-17 Alexander PopovAdd the spectre_v2_user check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-17 Alexander PopovDo refactoring in normalize_cmdline_options() commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-17 Alexander PopovAdd the spec_store_bypass_disable check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-17 Alexander PopovAdd the spectre_v2 check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-17 Alexander PopovIntroduce the 'is present' check instead of expected... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-11 Alexander PopovAdd the 'mitigations' check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-09 Alexander PopovAdd the nosmt check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-09 Alexander PopovAdd a special 'desired val' -- 'is not off' commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-09 Alexander PopovImprove the result descriptions commit | commitdiff | tree | snapshot (zip tar.gz)
2022-11-08 Alexander PopovAdd assertions to check arguments of the Class constructors commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-23 Alexander PopovUpdate the README commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-23 Alexander PopovAdd the ARM64_E0PD check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-23 Alexander PopovFix the SCHED_CORE check: it's now available for ARM64... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-23 Alexander PopovUpdate the self-protection checks adopted by KSPP ... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-22 Alexander PopovUpdate the self-protection checks adopted by KSPP ... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-22 Alexander PopovUpdate the self-protection checks adopted by KSPP ... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-22 Alexander PopovUpdate the KSPP recommendations again commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-13 Alexander PopovUpdate the self-protection checks adopted by KSPP ... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-13 Alexander PopovUpdate the self-protection checks adopted by KSPP ... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-13 Alexander PopovUpdate the HW_RANDOM_TPM check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-13 Alexander PopovUpdate the UBSAN checks according to the KSPP recommend... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-13 Alexander PopovUpdate the security policy checks adopted by KSPP commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-13 Alexander PopovUpdate the KSPP recommendations commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-12 Alexander PopovImprove the README commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-09 Alexander PopovUpdate the README commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-09 Alexander PopovDrop some of my security policy recommendations commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-09 Alexander PopovCheck SECURITY_SELINUX_DEVELOP (recommended by Clip OS) commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-09 Alexander PopovCheck SECURITY_SELINUX_BOOTPARAM (recommended by Clip OS) commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-09 Alexander PopovImprove the HW_RANDOM_TPM check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-09 Alexander PopovCheck COREDUMP (recommended by Clip OS) commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-09 Alexander PopovCheck CONFIG_HW_RANDOM_TPM (recommended by Clip OS) commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-09 Alexander PopovCheck X86_MCE, X86_MCE_INTEL, X86_MCE_AMD (recommended... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-09 Alexander PopovImprove the README commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-07 Alexander PopovUpdate the README commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-02 Alexander PopovAlso check 'nospectre_v2' with 'spectre_v2' commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-02 Alexander PopovChange the reason for the 'nopti' check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-02 Alexander PopovChange the reason for the 'nokaslr' check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-02 Alexander PopovAdd the 'spectre_v2' check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-02 Alexander PopovAdd the 'nospectre_v2' check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-02 Alexander PopovChange the reason for the 'nosmep' and 'nosmap' checks commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-02 Alexander PopovAdd the 'nospectre_v1' check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-10-02 Alexander PopovAdd the 'nopti' check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-24 Alexander PopovAdd the comments: CC_IS_GCC and CC_IS_CLANG exist since... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-24 Alexander PopovAdd the UBSAN_LOCAL_BOUNDS check for Clang build commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-18 Alexander PopovUpdate the links to AOSP and GKI commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovUpdate the README commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovDetect the compiler used for the kernel compilation commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovDon't use CONFIG_CC_IS_GCC in the checks (it was introd... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovMove get-nix-kconfig.py to kconfig_hardened_check/confi... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovFix the X86_SMAP check: it is enabled by default since... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovCheck the nosmap and nosmep cmdline parameters commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovAdapt the RANDSTRUCT checks to the changes in Linux... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovFix the comment: SHADOW_CALL_STACK is now available... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovAdd the SECURITY_LANDLOCK recommendation by KSPP commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-23 Alexander PopovCheck the nokaslr cmdline parameter commit | commitdiff | tree | snapshot (zip tar.gz)
next
kconfig-hardened-check