kconfig-hardened-check.git
2019-11-28 Alexander PopovAdd AOSP kernel config for Pixel 3a
2019-08-23 Alexander PopovIntroduce the versioning v0.5.2
2019-08-23 Alexander PopovUpdate the script output in the README
2019-08-23 Alexander PopovAdd HARDEN_BRANCH_PREDICTOR and HARDEN_EL2_VECTORS
2019-08-23 Alexander PopovBring more order to the offsets (style fix)
2019-08-22 Alexander PopovAdd INIT_STACK_ALL as an alternative to GCC_PLUGIN_STRU...
2019-08-22 Alexander PopovAdd SHUFFLE_PAGE_ALLOCATOR from v5.2
2019-08-22 Alexander PopovAdd some new sysctls (to remember them)
2019-07-08 Alexander PopovMerge pull request #22 from adrianopol/master
2019-07-07 Andrew Petelin#20 fix: use right quotes in json output 22/head
2019-06-24 Alexander PopovDo code refactoring without changing the functionality
2019-06-24 Alexander PopovMerge branch 'json-support'
2019-06-24 Alexander Popovjson: Fix minor things and update the README
2019-06-24 Andrew Petelinadd --json option 21/head
2019-06-04 Alexander PopovDrop CONFIG_X86_MSR from the recommendations
2019-06-03 Alexander PopovAdd the LDISC_AUTOLOAD check
2019-06-03 Alexander PopovAttribute some of my recommendations to CLIP OS - part II
2019-06-03 Alexander PopovAdd the link to the CLIP OS kernel configuration
2019-06-03 Alexander PopovUpdate the README
2019-06-03 Alexander PopovUpdate the README (printing format)
2019-06-03 Alexander PopovAdd a snapshot of the CLIP OS config documentation
2019-06-03 Alexander PopovAttribute some of my recommendations to CLIP OS
2019-06-03 Alexander PopovAdd my recommendations for AMD (similar to CLIP OS...
2019-06-03 Alexander PopovAdd X86-specific CLIP OS recommendations for kernel...
2019-06-03 Alexander PopovAdd arch-independent CLIP OS recommendations for kernel...
2019-06-03 Alexander PopovAdd more details about STACKLEAK
2019-06-03 Alexander PopovDon't recommend any particular LSM to avoid the holy war
2019-06-03 Alexander PopovAdd CLIP OS recommendations for cutting attack surface
2019-06-03 Alexander PopovImprove printing of the results
2019-06-03 Alexander PopovUpdate the link to Alpine config
2019-06-03 Alexander PopovMerge pull request #18 from HacKurx/patch-1
2019-06-01 LoïcUpdate pentoo config link 18/head
2019-05-27 Alexander PopovAdd more kernel command line parameters to comments
2019-05-17 Alexander PopovMerge remote-tracking branch 'hackurx/master'
2019-05-12 LoïcCreate rhel-8.0.config 17/head
2019-05-12 LoïcUpdate and rename pentoo-4.17.11.config to pentoo-livec...
2019-05-12 LoïcUpdate Archlinux-hardened.config
2019-05-12 LoïcUpdate Alpinelinux-edge.config
2019-05-12 LoïcUpdate debian-stretch.config
2019-05-12 LoïcCreate AmazonLinux2.config
2019-03-20 Alexander PopovAdd Q&A to the README
2019-03-13 Alexander PopovAdd the comment about kptr_restrict
2019-03-13 Alexander PopovAdd ARM64_PTR_AUTH check
2019-03-13 Alexander PopovAdd STACKPROTECTOR_PER_TASK check for ARM
2019-03-13 Alexander PopovAdd defconfigs for 5.0
2019-03-12 Alexander PopovDon't hide AND check results if the requirements are...
2019-03-12 Alexander PopovUpdate the README
2019-03-12 Alexander PopovImprove the final result output
2019-03-12 Alexander PopovUse the AND check for HARDENED_USERCOPY_FALLBACK
2019-03-12 Alexander PopovUse the AND check for PAGE_POISONING_NO_SANITY and...
2019-03-12 Alexander PopovImplement AND ComplexOptCheck
2019-03-12 Alexander PopovAdd a sanity check and do minor refactoring
2019-03-12 Alexander PopovIntroduce the ComplexOptCheck superclass
2019-03-11 Alexander PopovUpdate the README
2019-03-11 Alexander PopovAdd explicit checks for CONFIG_MODULES and CONFIG_DEVMEM
2019-03-11 Alexander PopovAdd missing OR use case
2019-03-11 Alexander PopovImprove the output of OR checks
2019-03-04 Alexander PopovAdd the RESET_ATTACK_MITIGATION check according to...
2019-03-04 Alexander PopovFix false positive about CONFIG_MODULE_SIG_FORCE.
2019-01-24 Alexander PopovUpdate the README and comments after adding ARM support
2019-01-24 Alexander PopovFix typo in KSPP recommendations for ARM
2019-01-24 Alexander PopovAdd ARM support
2019-01-23 Alexander PopovUpdate the README after adding ARM64 support
2019-01-23 Alexander PopovGo through all the checks in debug mode
2019-01-23 Alexander PopovAdd ARM64 support
2019-01-22 Alexander PopovUpdate the README after adding X86_32 support
2019-01-22 Alexander PopovAdd X86_32 support
2019-01-22 Alexander PopovMerge branch 'arch-configs'
2019-01-22 Alexander PopovCreate a separate directory for distro configs
2019-01-22 Alexander PopovCreate a separate directory for defconfigs
2019-01-22 Alexander PopovAdd arm64 defconfig for v4.20
2019-01-22 Alexander PopovAdd arm defconfig for v4.20
2019-01-22 Alexander PopovAdd x86_32 defconfig for v4.20
2019-01-22 Alexander PopovCreate a separate directory for KSPP recommendations
2019-01-22 Alexander PopovSpecify the architecture in KSPP recommendations
2019-01-21 Alexander PopovUpdate the README (arch support)
2019-01-21 Alexander PopovMake the script aware of target architecture
2019-01-21 Alexander PopovMerge branch 'from-tyhicks-1'
2019-01-21 Tyler HicksAdd a KSPP recommendations config for arm64
2019-01-21 Tyler HicksAdd a KSPP recommendations config for arm
2019-01-21 Tyler HicksAdd a KSPP recommendations config for x86_32
2019-01-21 Tyler HicksMake KSPP recommendations config x86_64 specific
2019-01-21 Tyler HicksUpdate kspp-recommendations.config to look like an...
2019-01-14 Alexander PopovAdd x86_64_defconfig for v4.20
2019-01-14 Alexander PopovMerge branch 'decision-cleanup'
2019-01-14 Alexander PopovUpdate README
2019-01-14 Alexander PopovChange the last 'ubuntu18' checks (about lockdown)
2019-01-14 Alexander PopovChange 'decision' to 'grsecurity' for their additional...
2019-01-14 Alexander PopovChange 'decision' to 'kspp' for non-default options...
2019-01-14 Alexander PopovChange 'decision' to 'defconfig' for hardening features...
2018-12-21 Alexander PopovAdd kernel command line options enabling mitigations...
2018-12-12 Alexander PopovAdd TODO (hardening preferences for ARM) and update...
2018-12-12 Alexander PopovCheck x86 hardening features: X86_SMAP and X86_INTEL_UMIP
2018-12-12 Alexander PopovAdd SECURITY_LOADPIN check
2018-12-12 Alexander PopovAdd SLAB_MERGE_DEFAULT check
2018-12-12 Alexander PopovMention net.core.bpf_jit_harden
2018-12-12 Alexander PopovRecommend slub_debug=FZP
2018-12-07 Alexander PopovMark options connected with CONFIG_LOCK_DOWN_KERNEL...
2018-12-07 Alexander PopovAdd CONFIG_LOCK_DOWN_KERNEL
2018-12-05 Alexander PopovAdd a hint about gcc plugins support
next