projects
/
kconfig-hardened-check.git
/ shortlog
commit
grep
author
committer
pickaxe
?
search:
re
summary
| shortlog |
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
kconfig-hardened-check.git
2024-06-15
Alexander Popov
Add the MAGIC_SYSRQ_DEFAULT_ENABLE check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-15
Alexander Popov
Sync with KSPP: update the `decision` for some checks
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-15
Alexander Popov
Add CONFIG_CC_IS_CLANG and CONFIG_CC_IS_GCC to the...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-15
Alexander Popov
ruff: Fix EXE001 "Shebang is present but file is not...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-10
Alexander Popov
Add the comment about 'if arch' for the 'cut_attack_sur...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-10
Alexander Popov
Update the KSPP recommendations
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-10
Alexander Popov
Code refactoring to improve test coverage (II)
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-10
Alexander Popov
Code refactoring to improve test coverage (I)
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-09
Alexander Popov
Merge branch 'scs-pac'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-09
Alexander Popov
Merge branch 'page-table-check'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-02
Alexander Popov
Merge branch 'open_check'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-02
Alexander Popov
CI: Add the test for the code checking that the cmdline...
134/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-02
Alexander Popov
CI: Add the tests for the code checking that the config...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-02
Alexander Popov
Check that the cmdline file is not empty
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-02
Alexander Popov
Also check that the cmdline file and sysctl file exist
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-02
Alexander Popov
Merge branch 'master' into open-check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-02
Alexander Popov
Check MITIGATION_SPECTRE_BHI and spectre_bhi
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-02
Alexander Popov
Check MITIGATION_RFDS and reg_file_data_sampling
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-02
Alexander Popov
Add the new name of SPECULATION_MITIGATIONS
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-02
Alexander Popov
Add the new names of RETPOLINE, CPU_SRSO, SLS
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-06-02
Alexander Popov
Add the new name of PAGE_TABLE_ISOLATION
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-22
jvoisin
Add two PAGE_TABLE_CHECK related checks from kspp
140/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-19
Julien Voisin
Merge branch 'master' into scs_pac
131/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-14
Alexander Popov
Merge remote-tracking branch 'origin/pylint'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-14
Alexander Popov
Don't use TODO to avoid pylint warnings
136/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-14
Alexander Popov
CI: add pylint
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-14
Alexander Popov
Drop 'disable=invalid-name' for pylint
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-14
Alexander Popov
Drop __about__.py and use 'version = attr:' in setup.cfg
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
CI: Add the mypy arguments to the WoodPecker CI
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
Merge branch 'typing'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
CI: Put mypy into a separate workflow and add some...
121/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
Introduce ResultType and improve static typing in test_...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
Improve the VersionCheck static typing
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
Improve typing and drop the unused **kwargs in the...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
Improve _open() to avoid mypy and pylint warnings
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
CI: Check static typing with mypy during the functional...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
Style fixes for engine import
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
Use dict instead of OrderedDict
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
Add more typing annotations to test_engine.py
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
Fix mypy typing warnings for ChecklistObjType
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
Add more precise typing for checklist: List[ChecklistOb...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
Fix assertion style
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
Fix mypy typing warnings in engine.py
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
Add more typing annotations to engine.py
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-13
Alexander Popov
Move print_unknown_options() to engine.py
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-12
Alexander Popov
Add more precise typing for OrderedDict
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-12
Alexander Popov
Add more typing annotations to checks.py
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-12
Alexander Popov
Make the static typing work for Python v3.8
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-12
Alexander Popov
Fix mypy typing warnings in __init__.py
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-12
Alexander Popov
Add more typing annotations to __init__.py
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-12
Alexander Popov
Fix pylint warnings in _open
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-12
jvoisin
Add a check to `_open`
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-12
Alexander Popov
Fix mypy warning in _open()
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-12
Alexander Popov
Fix mypy warning in json_dump()
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-03
jvoisin
Add a check for CONFIG_UNWIND_PATCH_PAC_INTO_SCS
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-03
Julien Voisin
Merge branch 'master' into typing
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-03
Alexander Popov
CI: Don't run the tests with coverage control for pull...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Alexander Popov
CI: Add a functional test without collecting coverage...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Alexander Popov
CI: Fix the name of engine_unit-test_no_coverage (II)
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Alexander Popov
CI: Fix the name of engine_unit-test_no_coverage
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Alexander Popov
CI: Add a unit-test without collecting coverage (tired...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Alexander Popov
Merge branch 'skip_sysctl'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Alexander Popov
Style fixes, should be no functional changes
125/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Alexander Popov
Fix the reason and decision of the KEXEC_CORE check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Alexander Popov
Fix the reason and decision of the BPF_JIT check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Alexander Popov
Restore the `dev.tty.legacy_tiocsti` check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Alexander Popov
Use CONFIG_LOCALVERSION instead of CONFIG_DEFAULT_INIT...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Eneas U de...
skip kernel.modules_disabled if MODULES not set
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Eneas U de...
Skip unprivileged_userfaultfd if USERFAULTFD unset
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Eneas U de...
Don't fail if dev.tty.legacy_tiocsti not found
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Eneas U de...
Skip unprivileged_bpf_disabled if BPF_SYSCALL not set
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Eneas U de...
Skip kexec_load_disabled if KEXEC_CORE is not set
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-05-02
Eneas U de...
Skip bpf_jit_harden sysctl if BPF_JIT is not set
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-30
Alexander Popov
Merge branch 'cpu_depend'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-30
jvoisin
Add some lightweight typing
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-30
Alexander Popov
Fix the reason and decision for CPU_SUP_INTEL
123/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-30
Alexander Popov
Style fixes
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-23
Eneas U de...
Skip CPU-dependent checks if CPU is not supported
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-21
Alexander Popov
Like grep, colorize the output only if stdout is connec...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-21
Alexander Popov
Don't use the `type` name for the class methods
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-18
Alexander Popov
Add the BLK_DEV_WRITE_MOUNTED/bdev_allow_write_mounted...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-17
Alexander Popov
CI: codecov-action@v3.1.5 with token doesn't work well...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-17
Alexander Popov
CI: Return to codecov-action@v3.1.5, but with tokens
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-17
Alexander Popov
CI: Update python versions
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-17
Alexander Popov
Add the links to the corresponding codecov pages in...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-17
Alexander Popov
CI: Move to codecov-action@4
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-17
Alexander Popov
CI: Move to codecov-action@v3.1.5
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-17
Alexander Popov
Merge branch 'shstk'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-17
Alexander Popov
Fix 'decision' for the X86_USER_SHADOW_STACK check
120/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-04-15
jvoisin
Add a check for X86_USER_SHADOW_STACK
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-03-30
Alexander Popov
Add a comment that 'user.max_user_namespaces=0' may...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-03-25
Alexander Popov
Update the README
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-03-25
Alexander Popov
Improve the CONFIG_CFI_CLANG checks (add the CONFIG_CC_...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-03-25
Alexander Popov
Drop the GCC_PLUGINS check (checking CC_IS_GCC is enough)
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-03-25
Alexander Popov
Add the CONFIG_CC_IS_GCC dependency for gcc plugins
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-03-25
Alexander Popov
Don't require GCC_PLUGINS separately
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-03-24
Alexander Popov
Rename the 'my' check decision to 'a13xp0p0v'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-03-17
Alexander Popov
Make the table column names and JSON field names fit...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-03-17
Alexander Popov
Merge remote-tracking branch 'krishjainx/improve-json...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-03-17
krishjainx
update
115/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
next