kconfig-hardened-check.git
6 days ago Alexander PopovUpdate README master
6 days ago Alexander PopovAdd some cases to improve CI test coverage
6 days ago Alexander PopovMerge branch 'autodetect2'
6 days ago Alexander PopovTest the autodetection 163/head
6 days ago Alexander PopovDon't exit from perform_checking()
6 days ago Alexander PopovAdd the mprint() wrapper
6 days ago Alexander PopovHandle the case of denied permission in the autodetect...
13 days ago Alexander PopovRework the prototype
13 days ago Alexander PopovMinor renaming
13 days ago Alexander PopovImprove the help message and arguments handling
13 days ago jvoisinAdd an --autodetect option
13 days ago Alexander PopovCheck either CONFIG_LIST_HARDENED or CONFIG_DEBUG_LIST
13 days ago Alexander PopovMerge branch 'arch_mmap_rnd'
13 days ago Alexander PopovSkip the `CONFIG_ARCH_MMAP_RND_COMPAT_BITS` option... 164/head
13 days ago Alexander PopovStyle fixes
13 days ago Alexander PopovClever trick to drop some code
2024-10-27 valera disgraceimplementation of arch_mmap_rnd checks
2024-10-21 Alexander PopovDon't crash if `sysctl.conf` has no options for parsing
2024-10-12 Alexander PopovUpdate python versions in CI
2024-10-12 Alexander PopovAdd the SECCOMP_CACHE_DEBUG check
2024-10-08 Alexander PopovMerge branch 'from-flipthewho'
2024-10-07 flipthewhoimplementation of vm.mmap_min_addr check 157/head
2024-10-06 Alexander PopovImprove the output
2024-10-06 Alexander PopovDrop some unneeded assertions
2024-10-06 Alexander PopovUse perform_checking() for separate sysctl checking
2024-10-06 Alexander PopovAdd perform_checking()
2024-10-06 Alexander PopovReorder populating the checklist with data
2024-10-06 Alexander PopovDetect the kernel version before the arch
2024-10-06 Alexander PopovAdd thanks!
2024-10-06 Alexander PopovImprove the functional test coverage
2024-10-06 Alexander PopovFix the sysctl.conf test at github
2024-10-06 Alexander PopovImprove and reorder the functional tests
2024-10-06 Alexander PopovDrop some duplicated code (thanks to the coverage report)
2024-10-06 Alexander PopovHandle empty files properly
2024-10-06 Alexander Popovengine: Improve the object oriented model
2024-10-03 Alexander PopovMerge branch 'from-flipthewho'
2024-10-03 Alexander Popovstyle fix
2024-09-26 flipthewhoimplementation of detect_arch_sysctl() 161/head
2024-09-10 Alexander PopovMerge branch 'from-flipthewho-1'
2024-09-10 Alexander PopovStyle fixes 156/head
2024-09-09 flipthewhoimplementation of `CONFIG_CFI_AUTO_DEFAULT`
2024-09-04 Alexander PopovMerge branch 'sysctl-fixes'
2024-09-04 Alexander Popovsysctl parsing: change parsing errors to warnings and... sysctl-fixes 160/head
2024-09-04 Alexander Popovsysctl parsing: Allow comments (they usually exist...
2024-09-04 Alexander Popovsysctl parsing: Allow missing space before '='
2024-09-04 Alexander PopovDrop the UNWIND_PATCH_PAC_INTO_SCS recommendation for now
2024-09-01 Alexander PopovReady for the release 0.6.10 v0.6.10
2024-09-01 Alexander PopovUpdate issues.md
2024-09-01 Alexander PopovUpdate the README
2024-09-01 Alexander PopovFix style (quotation marks)
2024-09-01 Alexander PopovUpdate the NixOS kernel configs
2024-09-01 Alexander PopovDon't normalize the `cfi` cmdline parameter
2024-09-01 Alexander PopovSplit the cut_attack_surface checks that contain the...
2024-09-01 Alexander PopovUpdate the BCACHE_CLOSURES_DEBUG check
2024-09-01 Alexander PopovFix `if arch` for the 'mitigations' cmdline check
2024-09-01 Alexander PopovRemove `if arch` for the CPU_MITIGATIONS check
2024-09-01 Alexander PopovRemove `if arch` for the X86_VSYSCALL_EMULATION check
2024-09-01 Alexander PopovAdd the ARM_SMMU* kconfig checks for ARM
2024-09-01 Alexander PopovUpdate the DEBUG_WX check for ARM64 and ARM
2024-09-01 Alexander PopovAdd `if arch` for PAGE_TABLE_CHECK*
2024-09-01 Alexander PopovUpdate the AMD_IOMMU_V2 kconfig check
2024-09-01 Alexander PopovUpdate the UBSAN_SANITIZE_ALL kconfig check
2024-08-29 Alexander PopovMerge branch 'from-willenst-1'
2024-08-28 Alexander Popovunittest: test VersionCheck.table_print() to hit the...
2024-08-28 Alexander PopovMerge branch 'from-willenst-2'
2024-08-27 Willenstremove engine debug output 155/head
2024-08-27 WillenstAdd test for `colorize_result`
2024-08-27 WillenstAdd test for `print_unknown_options`
2024-08-26 WillenstAdd io_uring_disabled sysctl check 152/head
2024-08-19 Alexander PopovMerge branch 'from-jvoisin'
2024-08-19 Alexander PopovAdd the `TEST_DEBUG_VIRTUAL` kconfig check 138/head
2024-08-19 Alexander PopovChange the `reason` for the `IP_SCTP` and `KGDB` kconfi...
2024-08-19 Alexander PopovRemove the `PAGE_OWNER` kconfig check
2024-08-19 Alexander PopovDisabling VCAP_KUNIT_TEST and BUILD_SALT doesn't look...
2024-08-19 Alexander PopovFix the check order, no functional changes
2024-08-19 Alexander PopovIntroduce the ARM_PTDUMP_DEBUGFS check
2024-08-19 Alexander PopovMerge branch 'master' into from-jvoisin
2024-08-18 Alexander PopovMerge remote-tracking branch 'citypw/patch-1'
2024-08-11 Shawn CAdd ARM SMMU check options 150/head
2024-08-11 Alexander PopovAdd missing UBSAN_SIGNED_WRAP mentioned in kernel/confi...
2024-08-11 Alexander PopovImprove the CONFIG_GCC_PLUGIN_STRUCTLEAK check
2024-08-11 Alexander PopovUpdate the KSPP recommendations (II)
2024-08-11 Alexander PopovUpdate the KSPP recommendations
2024-08-11 Alexander PopovAdd the comments about `vm.mmap_rnd_bits` and `vm.mmap_...
2024-08-11 Alexander PopovMark the sysrq checks as GrapheneOS recommendations
2024-08-11 Alexander PopovReorder some checks
2024-08-10 Alexander PopovImprove the reflections on CONFIG_PANIC_ON_OOPS
2024-08-10 Alexander PopovAdd the LKDTM check
2024-07-29 Alexander PopovAdd defconfigs for Linux v6.10
2024-07-28 Alexander PopovMerge branch 'simp_detect_arch'
2024-07-16 jvoisinSimplify a bit the detect_arch function 148/head
2024-07-07 Alexander PopovAdd the FAULT_INJECTION check
2024-07-07 Alexander PopovAdd the CONFIG_N_GSM check
2024-07-07 Alexander PopovAdd the CRASH_DUMP check
2024-07-07 Alexander PopovUpdate the `kfence.sample_interval` check
2024-07-06 Alexander PopovAllow the empty values for Kconfig options
2024-07-06 Alexander PopovAdd the missing SPDX info
2024-07-06 Alexander PopovImprove the README
2024-07-06 Alexander PopovSpecify the `GPL-3.0-only` license explicitly
2024-07-03 Alexander PopovUpdate the `decision` for the SLAB_MERGE_DEFAULT check
next