projects
/
kconfig-hardened-check.git
/ shortlog
commit
grep
author
committer
pickaxe
?
search:
re
summary
| shortlog |
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
kconfig-hardened-check.git
2019-06-03
Alexander Popov
Add my recommendations for AMD (similar to CLIP OS...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-06-03
Alexander Popov
Add X86-specific CLIP OS recommendations for kernel...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-06-03
Alexander Popov
Add arch-independent CLIP OS recommendations for kernel...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-06-03
Alexander Popov
Add more details about STACKLEAK
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-06-03
Alexander Popov
Don't recommend any particular LSM to avoid the holy war
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-06-03
Alexander Popov
Add CLIP OS recommendations for cutting attack surface
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-06-03
Alexander Popov
Improve printing of the results
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-06-03
Alexander Popov
Update the link to Alpine config
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-06-03
Alexander Popov
Merge pull request #18 from HacKurx/patch-1
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-06-01
Loïc
Update pentoo config link
18/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-05-27
Alexander Popov
Add more kernel command line parameters to comments
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-05-17
Alexander Popov
Merge remote-tracking branch 'hackurx/master'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-05-12
Loïc
Create rhel-8.0.config
17/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-05-12
Loïc
Update and rename pentoo-4.17.11.config to pentoo-livec...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-05-12
Loïc
Update Archlinux-hardened.config
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-05-12
Loïc
Update Alpinelinux-edge.config
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-05-12
Loïc
Update debian-stretch.config
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-05-12
Loïc
Create AmazonLinux2.config
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-20
Alexander Popov
Add Q&A to the README
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-13
Alexander Popov
Add the comment about kptr_restrict
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-13
Alexander Popov
Add ARM64_PTR_AUTH check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-13
Alexander Popov
Add STACKPROTECTOR_PER_TASK check for ARM
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-13
Alexander Popov
Add defconfigs for 5.0
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-12
Alexander Popov
Don't hide AND check results if the requirements are...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-12
Alexander Popov
Update the README
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-12
Alexander Popov
Improve the final result output
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-12
Alexander Popov
Use the AND check for HARDENED_USERCOPY_FALLBACK
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-12
Alexander Popov
Use the AND check for PAGE_POISONING_NO_SANITY and...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-12
Alexander Popov
Implement AND ComplexOptCheck
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-12
Alexander Popov
Add a sanity check and do minor refactoring
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-12
Alexander Popov
Introduce the ComplexOptCheck superclass
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-11
Alexander Popov
Update the README
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-11
Alexander Popov
Add explicit checks for CONFIG_MODULES and CONFIG_DEVMEM
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-11
Alexander Popov
Add missing OR use case
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-11
Alexander Popov
Improve the output of OR checks
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-04
Alexander Popov
Add the RESET_ATTACK_MITIGATION check according to...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-03-04
Alexander Popov
Fix false positive about CONFIG_MODULE_SIG_FORCE.
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-24
Alexander Popov
Update the README and comments after adding ARM support
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-24
Alexander Popov
Fix typo in KSPP recommendations for ARM
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-24
Alexander Popov
Add ARM support
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-23
Alexander Popov
Update the README after adding ARM64 support
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-23
Alexander Popov
Go through all the checks in debug mode
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-23
Alexander Popov
Add ARM64 support
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-22
Alexander Popov
Update the README after adding X86_32 support
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-22
Alexander Popov
Add X86_32 support
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-22
Alexander Popov
Merge branch 'arch-configs'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-22
Alexander Popov
Create a separate directory for distro configs
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-22
Alexander Popov
Create a separate directory for defconfigs
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-22
Alexander Popov
Add arm64 defconfig for v4.20
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-22
Alexander Popov
Add arm defconfig for v4.20
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-22
Alexander Popov
Add x86_32 defconfig for v4.20
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-22
Alexander Popov
Create a separate directory for KSPP recommendations
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-22
Alexander Popov
Specify the architecture in KSPP recommendations
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-21
Alexander Popov
Update the README (arch support)
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-21
Alexander Popov
Make the script aware of target architecture
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-21
Alexander Popov
Merge branch 'from-tyhicks-1'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-21
Tyler Hicks
Add a KSPP recommendations config for arm64
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-21
Tyler Hicks
Add a KSPP recommendations config for arm
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-21
Tyler Hicks
Add a KSPP recommendations config for x86_32
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-21
Tyler Hicks
Make KSPP recommendations config x86_64 specific
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-21
Tyler Hicks
Update kspp-recommendations.config to look like an...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-14
Alexander Popov
Add x86_64_defconfig for v4.20
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-14
Alexander Popov
Merge branch 'decision-cleanup'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-14
Alexander Popov
Update README
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-14
Alexander Popov
Change the last 'ubuntu18' checks (about lockdown)
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-14
Alexander Popov
Change 'decision' to 'grsecurity' for their additional...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-14
Alexander Popov
Change 'decision' to 'kspp' for non-default options...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2019-01-14
Alexander Popov
Change 'decision' to 'defconfig' for hardening features...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-12-21
Alexander Popov
Add kernel command line options enabling mitigations...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-12-12
Alexander Popov
Add TODO (hardening preferences for ARM) and update...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-12-12
Alexander Popov
Check x86 hardening features: X86_SMAP and X86_INTEL_UMIP
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-12-12
Alexander Popov
Add SECURITY_LOADPIN check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-12-12
Alexander Popov
Add SLAB_MERGE_DEFAULT check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-12-12
Alexander Popov
Mention net.core.bpf_jit_harden
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-12-12
Alexander Popov
Recommend slub_debug=FZP
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-12-07
Alexander Popov
Mark options connected with CONFIG_LOCK_DOWN_KERNEL...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-12-07
Alexander Popov
Add CONFIG_LOCK_DOWN_KERNEL
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-12-05
Alexander Popov
Add a hint about gcc plugins support
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-08-08
Alexander Popov
Merge branch 'from-hackurx-3'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-08-08
Alexander Popov
Move kspp-recommendations.config to config_files
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-08-08
Alexander Popov
Add missing configs
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-08-08
Alexander Popov
Fix links to configs
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-08-08
Alexander Popov
Update UEK config
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-08-08
Loïc
Add links.txt
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-30
Alexander Popov
Minor fixes for the script output
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-30
Alexander Popov
Merge branch 'from-iad42-1'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-30
Anatoly Ivanov
get_option_state function now looks a lot prettier...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-30
Anatoly Ivanov
Made long lines in major output shorter
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-30
Alexander Popov
And update README
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-30
Alexander Popov
Add DEBUG_RODATA as old alternative to STRICT_KERNEL_RWX
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-30
Alexander Popov
Align lines better
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-30
Alexander Popov
Add DEBUG_SET_MODULE_RONX as old alternative to STRICT_...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-30
Alexander Popov
Update the README (LKDTM is commented out)
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-30
Alexander Popov
Update the function names according to the new meaning
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-27
Alexander Popov
Merge branch 'from-hackurx-2'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-27
Loïc
Add debian-stretch.config
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-27
Loïc
Delete debian-sid-amd64.config
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-27
Loïc
Delete Archlinux-Testing.config
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-27
Loïc
Add SLE15.config
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2018-07-27
Alexander Popov
Comment out LKDTM
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
next