jxself.org public git repositories - kconfig-hardened-check.git/shortlog

projects / kconfig-hardened-check.git / shortlog

2024-03-17	Alexander Popov	Make the table column names and JSON field names fit...	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-17	Alexander Popov	Merge remote-tracking branch 'krishjainx/improve-json...	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-17	krishjainx	update 115/head	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-17	krishjainx	fix issues	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-14	krishjainx	Fix tests to work with new JSON schema	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-14	krishjainx	Improve JSON output format for enhanced processing	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-11	Alexander Popov	Improve the DEBUG_CREDENTIALS check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-10	Alexander Popov	Fix the false result of the REFCOUNT_FULL check for...	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-09	Alexander Popov	Have to revert codecov back to v3	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-09	Alexander Popov	Update codecov-action	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-09	Alexander Popov	Adapt test_version() in the unittest	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-09	Alexander Popov	Check all 3 numbers of the kernel version in VersionCheck	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-09	Alexander Popov	Fix the fresh set_state() bug found by unittest	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-09	Alexander Popov	Make `python -m unittest` show the whole output	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-09	Alexander Popov	Update github actions	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-09	Alexander Popov	Implement the set_state() method of the check classes	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-09	Alexander Popov	Use 3 numbers in the VersionCheck constructor	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-09	Alexander Popov	Parse all numbers of the kernel version	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-09	Alexander Popov	Skip the kernel version part after '-'	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-03-04	Alexander Popov	Add the ia32_emulation check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-02-19	Alexander Popov	Add MODULE_SIG_SHA3_512 as a valid option	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-02-17	Alexander Popov	Make LOCKDOWN_LSM 'self_protection', not 'security_policy'	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-16	Alexander Popov	Ready for the release 0.6.6 v0.6.6	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-16	Alexander Popov	Update issues.md	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-16	Alexander Popov	Update the README	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-16	Alexander Popov	Update the Ubuntu example configs	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-16	Alexander Popov	Don't print the warning about ARCH_MMAP_RND_BITS in...	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-16	Alexander Popov	Improve the check of DEBUG_NOTIFIERS feature (part 2)	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-16	Alexander Popov	Improve the check of DEBUG_NOTIFIERS feature	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-16	Alexander Popov	Improve the check of SCHED_STACK_END_CHECK.	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-16	Alexander Popov	Fix style (III)	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-16	Alexander Popov	Fix style (II)	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-16	Alexander Popov	Fix style (I)	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-16	Alexander Popov	Disable pylint too-many-locals, it's not useful for...	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-16	Alexander Popov	Fix pylint W0613: Unused argument 'arch'	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-16	Alexander Popov	Fix pylint E1101: Instance of 'OptCheck' has no 'type...	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-16	Alexander Popov	Fix pylint W0613: Unused argument 'mode'	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-15	Alexander Popov	Update the NixOS configs	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-14	Alexander Popov	Don't add options without explicitly recommended values...	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2024-01-14	Alexander Popov	UBSAN_SANITIZE_ALL is now available for ARM	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-30	Alexander Popov	Fix the order in the vdso32 check (part II)	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-30	Alexander Popov	Fix the order in the vdso32 check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-30	Alexander Popov	Improve the hackish refinement of the CONFIG_ARCH_MMAP_...	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-30	Alexander Popov	Show the option type in print_unknown_options()	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-30	Alexander Popov	Use raw strings for regular expression	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-30	Alexander Popov	Fix the 'decision' for the 'AIO' check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-29	Alexander Popov	Fix the 'decision' for the 'vdso32' check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-29	Alexander Popov	Improve the comment for the 'slab_common.usercopy_fallb...	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-28	Alexander Popov	Fix the arch condition for the SCHED_CORE check (III)	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-28	Alexander Popov	Update the KSPP recommendations	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-28	Alexander Popov	Fix the arch for the CPU_SRSO check (it's available...	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-28	Alexander Popov	Split the HW_RANDOM_TPM check (it's enabled by default...	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-28	Alexander Popov	Change the 'decision' of the INIT_STACK_ALL_ZERO check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-17	Alexander Popov	Add defconfigs for Linux v6.6	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-16	Alexander Popov	Add the RANDOM_KMALLOC_CACHES check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-16	Alexander Popov	Add the SECURITY_SELINUX_DEBUG check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-16	Alexander Popov	Fix the 'decision' for the LEGACY_TIOCSTI check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-16	Alexander Popov	Add the CONFIG_LIST_HARDENED check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-09	Alexander Popov	Add the gather_data_sampling check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-09	Alexander Popov	Add the CPU_SRSO check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-09	Alexander Popov	Add the SPECULATION_MITIGATIONS check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-09	Alexander Popov	Add the spec_rstack_overflow check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-09	Alexander Popov	Add the MODULE_FORCE_LOAD check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-02	Alexander Popov	Update the README	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-02	Alexander Popov	Add the check for dis_ucode_ldr	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-02	Alexander Popov	Add the MICROCODE_INTEL and MICROCODE_AMD checks	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-02	Alexander Popov	Add a check for the 'kfence.sample_interval' boot parameter	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-02	Alexander Popov	Add the KFENCE_SAMPLE_INTERVAL check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-02	Alexander Popov	Keep the recommendation to disable kernel modules	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-02	Alexander Popov	Add a comment about 'kernel.modules_disabled'	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-02	Alexander Popov	add --kernel-version option (#94)	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-12-01	Fabrice Fontaine	add --kernel-version option 94/head	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-18	Alexander Popov	Fix the reason for the 'kernel.yama.ptrace_scope' check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	Add kspp-recommendations/kspp-sysctl.txt	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	Fix the reason for the nosmt check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	Update kspp-cmdline-x86-64.txt	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	Add the 'dev.tty.legacy_tiocsti' check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	Add the 'kernel.randomize_va_space' check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	Add the 'fs.suid_dumpable' check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	Change the reason of the COREDUMP check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	Add the 'fs.protected_regular' check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	Add the 'fs.protected_fifos' check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	Add the 'fs.protected_hardlinks' check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	Add the 'fs.protected_symlinks' check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	Add the 'vm.unprivileged_userfaultfd' check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	Add the 'kernel.yama.ptrace_scope' check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	Add the 'kernel.kptr_restrict' check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	Improve the slab_common.usercopy_fallback check	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-17	Alexander Popov	hardened_usercopy=1 is now officially recommended by...	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-16	Alexander Popov	Enabling page_alloc.shuffle is now recommended by KSPP	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-16	Alexander Popov	'mitigations=auto,nosmt' is now recommended by KSPP	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-16	Alexander Popov	Disabling X86_VSYSCALL_EMULATION is now recommended...	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-16	Alexander Popov	Use /usr/bin/env in shebangs (#90)	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-05	Sandro Jäckel	Use /usr/bin/env in shebangs 90/head	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-10-04	Alexander Popov	Drop ZERO_CALL_USED_REGS in favour of backward-edge CFI	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-09-18	Alexander Popov	Update the README	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-09-18	Alexander Popov	Refactor the assertion in colorize_result() to improve...	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-09-17	Alexander Popov	Update the backup in issues.md	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-09-17	Alexander Popov	Rename kconfig-hardened-check into kernel-hardening...	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
2023-09-17	Alexander Popov	Renaming fixes renaming 85/head	commit \| commitdiff \| tree \| snapshot (zip tar.gz)
next

kconfig-hardened-check

RSS Atom