kconfig-hardened-check.git
2019-01-14 Alexander PopovChange 'decision' to 'kspp' for non-default options...
2019-01-14 Alexander PopovChange 'decision' to 'defconfig' for hardening features...
2018-12-21 Alexander PopovAdd kernel command line options enabling mitigations...
2018-12-12 Alexander PopovAdd TODO (hardening preferences for ARM) and update...
2018-12-12 Alexander PopovCheck x86 hardening features: X86_SMAP and X86_INTEL_UMIP
2018-12-12 Alexander PopovAdd SECURITY_LOADPIN check
2018-12-12 Alexander PopovAdd SLAB_MERGE_DEFAULT check
2018-12-12 Alexander PopovMention net.core.bpf_jit_harden
2018-12-12 Alexander PopovRecommend slub_debug=FZP
2018-12-07 Alexander PopovMark options connected with CONFIG_LOCK_DOWN_KERNEL...
2018-12-07 Alexander PopovAdd CONFIG_LOCK_DOWN_KERNEL
2018-12-05 Alexander PopovAdd a hint about gcc plugins support
2018-08-08 Alexander PopovMerge branch 'from-hackurx-3'
2018-08-08 Alexander PopovMove kspp-recommendations.config to config_files
2018-08-08 Alexander PopovAdd missing configs
2018-08-08 Alexander PopovFix links to configs
2018-08-08 Alexander PopovUpdate UEK config
2018-08-08 LoïcAdd links.txt
2018-07-30 Alexander PopovMinor fixes for the script output
2018-07-30 Alexander PopovMerge branch 'from-iad42-1'
2018-07-30 Anatoly Ivanovget_option_state function now looks a lot prettier...
2018-07-30 Anatoly IvanovMade long lines in major output shorter
2018-07-30 Alexander PopovAnd update README
2018-07-30 Alexander PopovAdd DEBUG_RODATA as old alternative to STRICT_KERNEL_RWX
2018-07-30 Alexander PopovAlign lines better
2018-07-30 Alexander PopovAdd DEBUG_SET_MODULE_RONX as old alternative to STRICT_...
2018-07-30 Alexander PopovUpdate the README (LKDTM is commented out)
2018-07-30 Alexander PopovUpdate the function names according to the new meaning
2018-07-27 Alexander PopovMerge branch 'from-hackurx-2'
2018-07-27 LoïcAdd debian-stretch.config
2018-07-27 LoïcDelete debian-sid-amd64.config
2018-07-27 LoïcDelete Archlinux-Testing.config
2018-07-27 LoïcAdd SLE15.config
2018-07-27 Alexander PopovComment out LKDTM
2018-07-25 Alexander PopovAvoid false positive errors if CONFIG_MODULES is not set
2018-07-25 Alexander PopovSupport both versions of the STACKPROTECTOR_STRONG...
2018-07-24 Alexander PopovMerge branch 'OR-from-anthraxx'
2018-07-24 Alexander PopovUpdate the README
2018-07-24 Alexander PopovImprove the OR result calculation
2018-07-24 Alexander PopovAdjust the output format
2018-07-24 anthraxxsupport DEVMEM not set when considering STRICT_DEVMEM...
2018-07-24 Alexander PopovAdd the comment describing OR use case
2018-07-24 Alexander PopovOR needs OptCheck.check() return values
2018-07-24 anthraxxsupport logical OR operations on options
2018-07-20 Alexander PopovUpdate usage in README.md
2018-07-20 Alexander PopovMerge branch 'from-hackurx-1'
2018-07-20 HacKurxAdd config_files directory
2018-07-20 LoïcAdd Alpinelinux-edge.config
2018-07-20 LoïcAdd Archlinux-hardened.config
2018-07-20 LoïcAdd CONFIG_BINFMT_AOUT to ubuntu18
2018-07-20 LoïcAdd Archlinux-Testing.config
2018-07-20 LoïcAdd debian-sid-amd64.config
2018-07-20 LoïcAdd Grsecurity recommendation on BINFMT_AOUT
2018-07-20 Alexander PopovMerge branch 'arch-changes-from-anthraxx'
2018-07-20 Alexander PopovCount errors in the end
2018-07-20 Alexander PopovRename 'opt_list' as well
2018-07-20 anthraxxrename Opt to better matching OptCheck
2018-07-20 Alexander PopovDon't return the result from Opt.check(), we don't...
2018-07-20 anthraxxstore option check result as class member
2018-07-20 Alexander PopovPlease forgive me, I fear lambdas :\
2018-07-20 Alexander PopovDebug mode output should be printed before the final...
2018-07-20 Alexander PopovFix the output: ERROR, not BUG
2018-07-20 Alexander PopovRename check_state() according the new meaning
2018-07-20 Alexander PopovFix the check against multiple options in config file
2018-07-20 Alexander PopovUse None as state of the options which are not found
2018-07-20 Alexander PopovDrop assertions which are now useless
2018-07-20 anthraxximprove architecture in preparation for new features
2018-07-13 Alexander PopovArgumentParser: drop unneeded default=False for args...
2018-07-13 Alexander PopovArgumentParser: Improve description
2018-07-13 anthraxxargparse: using python module instead of manual getopt
2018-07-05 Alexander PopovConsider 'not found' as an equivalent of 'is not set'
2018-07-05 Alexander PopovAdd rules for options disabled by grsecurity
2018-07-04 Alexander PopovMove some features to 'cut_attack_surface' category
2018-07-04 Alexander PopovMore decisions on kernel options
2018-07-03 Alexander PopovAdd Oracle Unbreakable Enterprise Kernel 5 (UEK-5)...
2018-06-22 Alexander PopovDrop CONFIG_DEBUG_KERNEL from kspp-recommendations...
2018-06-20 Alexander PopovDisable buggy IP_SCTP to cut attack surface
2018-06-20 Alexander PopovDisable only CONFIG_USER_NS, not whole CONFIG_NAMESPACES
2018-06-20 Alexander PopovAdd kconfig-hardened-check.py