kconfig-hardened-check.git
11 days ago Alexander Popovget_kconfigs.sh: Simplify the code
11 days ago Alexander Popovget_kconfigs.sh: Rename distro variable
11 days ago Alexander Popovget_kconfigs.sh: Fix the Azure Linux link (use v3.0)
11 days ago Alexander Popovget_kconfigs.sh: Improve Arch kconfig naming
11 days ago Alexander Popovget_kconfigs.sh: Drop Clearlinux (looks like it's not...
11 days ago Alexander Popovget_kconfigs.sh: Use Fedora 41 Updates and drop Fedora...
11 days ago Alexander Popovget_kconfigs.sh: Use CentOS Stream (more popular than...
11 days ago WillenstAdd script to update kconfigs
2024-11-16 Alexander PopovUpdate README
2024-11-16 Alexander PopovAdd some cases to improve CI test coverage
2024-11-16 Alexander PopovMerge branch 'autodetect2'
2024-11-16 Alexander PopovTest the autodetection 163/head
2024-11-16 Alexander PopovDon't exit from perform_checking()
2024-11-16 Alexander PopovAdd the mprint() wrapper
2024-11-16 Alexander PopovHandle the case of denied permission in the autodetect...
2024-11-09 Alexander PopovRework the prototype
2024-11-09 Alexander PopovMinor renaming
2024-11-09 Alexander PopovImprove the help message and arguments handling
2024-11-09 jvoisinAdd an --autodetect option
2024-11-09 Alexander PopovCheck either CONFIG_LIST_HARDENED or CONFIG_DEBUG_LIST
2024-11-09 Alexander PopovMerge branch 'arch_mmap_rnd'
2024-11-09 Alexander PopovSkip the `CONFIG_ARCH_MMAP_RND_COMPAT_BITS` option... 164/head
2024-11-09 Alexander PopovStyle fixes
2024-11-09 Alexander PopovClever trick to drop some code
2024-10-27 valera disgraceimplementation of arch_mmap_rnd checks
2024-10-21 Alexander PopovDon't crash if `sysctl.conf` has no options for parsing
2024-10-12 Alexander PopovUpdate python versions in CI
2024-10-12 Alexander PopovAdd the SECCOMP_CACHE_DEBUG check
2024-10-08 Alexander PopovMerge branch 'from-flipthewho'
2024-10-07 flipthewhoimplementation of vm.mmap_min_addr check 157/head
2024-10-06 Alexander PopovImprove the output
2024-10-06 Alexander PopovDrop some unneeded assertions
2024-10-06 Alexander PopovUse perform_checking() for separate sysctl checking
2024-10-06 Alexander PopovAdd perform_checking()
2024-10-06 Alexander PopovReorder populating the checklist with data
2024-10-06 Alexander PopovDetect the kernel version before the arch
2024-10-06 Alexander PopovAdd thanks!
2024-10-06 Alexander PopovImprove the functional test coverage
2024-10-06 Alexander PopovFix the sysctl.conf test at github
2024-10-06 Alexander PopovImprove and reorder the functional tests
2024-10-06 Alexander PopovDrop some duplicated code (thanks to the coverage report)
2024-10-06 Alexander PopovHandle empty files properly
2024-10-06 Alexander Popovengine: Improve the object oriented model
2024-10-03 Alexander PopovMerge branch 'from-flipthewho'
2024-10-03 Alexander Popovstyle fix
2024-09-26 flipthewhoimplementation of detect_arch_sysctl() 161/head
2024-09-10 Alexander PopovMerge branch 'from-flipthewho-1'
2024-09-10 Alexander PopovStyle fixes 156/head
2024-09-09 flipthewhoimplementation of `CONFIG_CFI_AUTO_DEFAULT`
2024-09-04 Alexander PopovMerge branch 'sysctl-fixes'
2024-09-04 Alexander Popovsysctl parsing: change parsing errors to warnings and... sysctl-fixes 160/head
2024-09-04 Alexander Popovsysctl parsing: Allow comments (they usually exist...
2024-09-04 Alexander Popovsysctl parsing: Allow missing space before '='
2024-09-04 Alexander PopovDrop the UNWIND_PATCH_PAC_INTO_SCS recommendation for now
2024-09-01 Alexander PopovReady for the release 0.6.10 v0.6.10
2024-09-01 Alexander PopovUpdate issues.md
2024-09-01 Alexander PopovUpdate the README
2024-09-01 Alexander PopovFix style (quotation marks)
2024-09-01 Alexander PopovUpdate the NixOS kernel configs
2024-09-01 Alexander PopovDon't normalize the `cfi` cmdline parameter
2024-09-01 Alexander PopovSplit the cut_attack_surface checks that contain the...
2024-09-01 Alexander PopovUpdate the BCACHE_CLOSURES_DEBUG check
2024-09-01 Alexander PopovFix `if arch` for the 'mitigations' cmdline check
2024-09-01 Alexander PopovRemove `if arch` for the CPU_MITIGATIONS check
2024-09-01 Alexander PopovRemove `if arch` for the X86_VSYSCALL_EMULATION check
2024-09-01 Alexander PopovAdd the ARM_SMMU* kconfig checks for ARM
2024-09-01 Alexander PopovUpdate the DEBUG_WX check for ARM64 and ARM
2024-09-01 Alexander PopovAdd `if arch` for PAGE_TABLE_CHECK*
2024-09-01 Alexander PopovUpdate the AMD_IOMMU_V2 kconfig check
2024-09-01 Alexander PopovUpdate the UBSAN_SANITIZE_ALL kconfig check
2024-08-29 Alexander PopovMerge branch 'from-willenst-1'
2024-08-28 Alexander Popovunittest: test VersionCheck.table_print() to hit the...
2024-08-28 Alexander PopovMerge branch 'from-willenst-2'
2024-08-27 Willenstremove engine debug output 155/head
2024-08-27 WillenstAdd test for `colorize_result`
2024-08-27 WillenstAdd test for `print_unknown_options`
2024-08-26 WillenstAdd io_uring_disabled sysctl check 152/head
2024-08-19 Alexander PopovMerge branch 'from-jvoisin'
2024-08-19 Alexander PopovAdd the `TEST_DEBUG_VIRTUAL` kconfig check 138/head
2024-08-19 Alexander PopovChange the `reason` for the `IP_SCTP` and `KGDB` kconfi...
2024-08-19 Alexander PopovRemove the `PAGE_OWNER` kconfig check
2024-08-19 Alexander PopovDisabling VCAP_KUNIT_TEST and BUILD_SALT doesn't look...
2024-08-19 Alexander PopovFix the check order, no functional changes
2024-08-19 Alexander PopovIntroduce the ARM_PTDUMP_DEBUGFS check
2024-08-19 Alexander PopovMerge branch 'master' into from-jvoisin
2024-08-18 Alexander PopovMerge remote-tracking branch 'citypw/patch-1'
2024-08-11 Shawn CAdd ARM SMMU check options 150/head
2024-08-11 Alexander PopovAdd missing UBSAN_SIGNED_WRAP mentioned in kernel/confi...
2024-08-11 Alexander PopovImprove the CONFIG_GCC_PLUGIN_STRUCTLEAK check
2024-08-11 Alexander PopovUpdate the KSPP recommendations (II)
2024-08-11 Alexander PopovUpdate the KSPP recommendations
2024-08-11 Alexander PopovAdd the comments about `vm.mmap_rnd_bits` and `vm.mmap_...
2024-08-11 Alexander PopovMark the sysrq checks as GrapheneOS recommendations
2024-08-11 Alexander PopovReorder some checks
2024-08-10 Alexander PopovImprove the reflections on CONFIG_PANIC_ON_OOPS
2024-08-10 Alexander PopovAdd the LKDTM check
2024-07-29 Alexander PopovAdd defconfigs for Linux v6.10
2024-07-28 Alexander PopovMerge branch 'simp_detect_arch'
2024-07-16 jvoisinSimplify a bit the detect_arch function 148/head
2024-07-07 Alexander PopovAdd the FAULT_INJECTION check
next