kconfig-hardened-check.git
2022-06-08 Alexander PopovTurn some error conditions into assertions (part 2)
2022-06-08 Alexander PopovTurn some error conditions into assertions (part 1)
2022-06-08 Alexander PopovDrop useless checks, the ComplexOptCheck constructor...
2022-06-08 Alexander Popovgithub actions: Test error handling (part 2)
2022-06-08 Alexander Popovgithub actions: Test error handling (part 1)
2022-05-30 Alexander Popovgithub actions: Collect coverage for error handling...
2022-05-30 Alexander Popovgithub actions: upgrade to codecov-action@v2
2022-05-30 Alexander PopovCheck that --config and --print are not used together
2022-05-30 Alexander Popovgithub actions: Collect coverage for cmdline checking
2022-05-30 Alexander Popovgithub actions: Improve the descriptions
2022-05-30 Alexander Popovgithub actions: Improve the test output
2022-05-30 Alexander PopovDrop dash-separated values from setup.cfg
2022-05-30 Alexander Popovgithub actions: Add testing with python 3.9
2022-05-28 Alexander PopovMerge branch 'cmdline'
2022-05-28 Alexander PopovChange the example output in README cmdline
2022-05-28 Alexander PopovDescribe the cmdline checking support in README
2022-05-28 Alexander PopovAdd the example config of Fedora 34
2022-05-28 Alexander PopovCheck the pti cmdline parameter
2022-05-28 Alexander PopovCheck the slab_nomerge cmdline parameter
2022-05-28 Alexander PopovCheck the randomize_kstack_offset cmdline parameter
2022-05-28 Alexander PopovAdd cmdline file parsing
2022-05-28 Alexander PopovAdd the infrastructure for cmdline checks
2022-05-28 Alexander PopovAdd '--cmdline' argument for the tool
2022-05-28 Alexander PopovAdd cmdline checks to '--print'
2022-05-28 Alexander PopovAdd the CmdlineCheck class
2022-05-15 Alexander PopovAdd the comment about sysrq_always_enabled
2022-05-15 Alexander PopovAdd the comment about rodata
2022-05-08 Alexander PopovUpdate direct feedback from Linux kernel maintainers...
2022-05-06 Alexander PopovAdd the comment about arm64.nomte
2022-05-06 Alexander PopovAdd the comment about kernel.randomize_va_space
2022-05-06 Alexander PopovAdd the KGDB check
2022-05-06 Alexander PopovAdd RANDOMIZE_MODULE_REGION_FULL for arm64
2022-04-28 Alexander PopovUpdate the README v0.5.17
2022-04-28 Alexander PopovMerge pull request #62 from evdenis/master
2022-04-28 Alexander PopovAdd the type property for OptCheck to fix a pylint...
2022-04-27 Denis EfremovAdd BLK_DEV_FD_RAWCMD 62/head
2022-04-22 Alexander PopovAdd the STACKPROTECTOR check from KSPP
2022-04-22 Alexander PopovDrop the ARM64_MTE check for userspace hardening
2022-04-22 Alexander PopovSeparate out checking SECURITY_WRITABLE_HOOKS and SECUR...
2022-04-22 Alexander PopovFix the arch condition for the SCHED_CORE check
2022-04-22 Alexander PopovAdd the KSPP recommendation of ZERO_CALL_USED_REGS
2022-04-22 Alexander PopovDisabling X86_MSR is recommended by KSPP
2022-04-20 Alexander PopovFix the bug in the verdict description for ComplexOptCheck
2022-04-20 Alexander PopovAdditional check for TYPES_OF_CHECKS
2022-04-20 Alexander PopovDrop PresenceCheck; OptCheck without 'expected' paramet...
2022-04-20 Alexander PopovUpdate the KSPP recommendations in the config_files
2022-04-20 Alexander PopovAdd the KSPP recommendation of SCHED_CORE
2022-04-20 Alexander PopovAdd the KSPP recommendation of IOMMU_DEFAULT_DMA_STRICT
2022-04-20 Alexander PopovAdd the KSPP recommendation of WERROR
2022-04-20 Alexander PopovAdd the KSPP recommendation of KFENCE
2022-04-08 Alexander PopovNo need in BPF_UNPRIV_DEFAULT_OFF if BPF_SYSCALL is...
2022-04-08 Alexander PopovMerge branch 'from-martin-rowe'
2022-04-07 Alexander PopovAdd defconfigs for Linux v5.17
2022-03-28 Alexander PopovDrop unneeded return values (refactoring)
2022-03-26 Martin RoweUBSAN_SANITIZE_ALL not available on ARM 60/head
2022-03-20 Alexander PopovAdd HARDEN_BRANCH_HISTORY for arm
2022-03-20 Alexander PopovAdd MITIGATE_SPECTRE_BRANCH_HISTORY for arm64
2022-03-18 Alexander PopovTHREAD_INFO_IN_TASK is available for ARM since v5.16
2022-03-18 Alexander PopovMerge branch 'from-martin-rowe'
2022-03-15 Martin RoweEFI mitigations can't be enabled if EFI is not set 59/head
2022-03-13 Alexander PopovFix the BPF_UNPRIV_DEFAULT_OFF check (it is enabled...
2022-03-13 Alexander PopovAdd CONFIG_SLS vs CVE-2021-26341 in Straight-Line-Specu...
2022-03-13 Alexander PopovAdd the comment that l1d_flush is a part of the l1tf...
2022-03-13 Alexander PopovAdd BPF_UNPRIV_DEFAULT_OFF to cut_attack_surface
2022-03-05 Alexander PopovUse the option type instead of calling hasattr()
2022-03-05 Alexander PopovMerge branch 'refactoring'
2022-02-14 Alexander PopovIntroduce the json_dump() class method refactoring
2022-02-14 Alexander PopovImprove 'type' for ComplexOptCheck and PresenceCheck...
2022-02-14 Alexander PopovMake populate_with_data() aware of data type
2022-02-14 Alexander PopovAdd 'type' for PresenceCheck and VersionCheck
2022-02-14 Alexander PopovRename VerCheck to VersionCheck
2022-02-14 Alexander PopovAdd more ComplexOptCheck validation
2022-02-14 Alexander PopovImprove print_unknown_options()
2022-02-14 Alexander PopovRemove 'CONFIG_' hardcoding
2022-02-11 Alexander PopovMerge branch 'refactoring'
2022-02-11 Alexander PopovRefactor the OR logic code
2022-02-11 Alexander PopovRename config to kconfig where needed (part II)
2022-01-22 Alexander PopovExtract populate_with_data() from perform_checks()
2022-01-22 Alexander PopovRename config to kconfig where needed
2022-01-22 Alexander PopovPrint the type of a check in the json mode
2022-01-22 Alexander PopovComplexOptCheck type has the type of the first opt...
2022-01-21 Alexander PopovUpdate the example output in the README (yes, now I...
2022-01-21 Alexander PopovDo more output tuning
2022-01-21 Alexander PopovUpdate the example output in the README
2022-01-21 Alexander PopovAdd check type
2022-01-21 Alexander PopovUpdate the example output in the README
2022-01-21 Alexander PopovPrint compactly
2022-01-21 Alexander PopovIntroduce KconfigCheck class
2022-01-21 Alexander PopovFix TRIM_UNUSED_KSYMS check
2021-12-24 Alexander PopovAdd l1d_flush (for future reference)
2021-12-05 Alexander PopovAdd ARM64_PTR_AUTH_KERNEL extracted from ARM64_PTR_AUTH
2021-11-21 Alexander PopovDocument the output modes specified by the `-m` parameter
2021-11-21 Alexander PopovTODO: RISC-V
2021-11-09 Alexander PopovUpdate the README (a lot of new checks appeared)
2021-11-09 Alexander PopovKeep the old X86_PTDUMP check as a backup
2021-11-09 Alexander PopovSimplify the check about PTDUMP_DEBUGFS (I was correct)
2021-11-09 Alexander PopovAdd more checks from grsecurity for cutting attack...
2021-11-09 Alexander PopovFix the 'decision' field of the IO_URING check
2021-11-09 Alexander PopovAdd more checks from grsecurity for cutting attack...
2021-11-09 Alexander PopovFix the 'decision' field of the KPROBES check
next