projects / kconfig-hardened-check.git / shortlog
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
kconfig-hardened-check.git
2024-06-19 Alexander PopovUpdate the KSPP recommendations (https://github.com... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-16 Alexander PopovUpdate the 'kernel.modules_disabled' check commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-16 Alexander PopovAdd the 'kernel.oops_limit' and 'kernel.warn_limit... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-16 Alexander PopovAdd the "cfi" check commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-16 Alexander PopovAdd the "MAGIC_SYSRQ_SERIAL" check commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-16 Alexander PopovAdd the "kernel.sysrq" check commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-15 Alexander PopovAdd the MAGIC_SYSRQ_DEFAULT_ENABLE check commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-15 Alexander PopovSync with KSPP: update the `decision` for some checks commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-15 Alexander PopovAdd CONFIG_CC_IS_CLANG and CONFIG_CC_IS_GCC to the... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-15 Alexander Popovruff: Fix EXE001 "Shebang is present but file is not... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-10 Alexander PopovAdd the comment about 'if arch' for the 'cut_attack_sur... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-10 Alexander PopovUpdate the KSPP recommendations commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-10 Alexander PopovCode refactoring to improve test coverage (II) commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-10 Alexander PopovCode refactoring to improve test coverage (I) commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-09 Alexander PopovMerge branch 'scs-pac' commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-09 Alexander PopovMerge branch 'page-table-check' commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-02 Alexander PopovMerge branch 'open_check' commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-02 Alexander PopovCI: Add the test for the code checking that the cmdline... 134/head commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-02 Alexander PopovCI: Add the tests for the code checking that the config... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-02 Alexander PopovCheck that the cmdline file is not empty commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-02 Alexander PopovAlso check that the cmdline file and sysctl file exist commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-02 Alexander PopovMerge branch 'master' into open-check commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-02 Alexander PopovCheck MITIGATION_SPECTRE_BHI and spectre_bhi commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-02 Alexander PopovCheck MITIGATION_RFDS and reg_file_data_sampling commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-02 Alexander PopovAdd the new name of SPECULATION_MITIGATIONS commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-02 Alexander PopovAdd the new names of RETPOLINE, CPU_SRSO, SLS commit | commitdiff | tree | snapshot (zip tar.gz)
2024-06-02 Alexander PopovAdd the new name of PAGE_TABLE_ISOLATION commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-22 jvoisinAdd two PAGE_TABLE_CHECK related checks from kspp 140/head commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-19 Julien VoisinMerge branch 'master' into scs_pac 131/head commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-14 Alexander PopovMerge remote-tracking branch 'origin/pylint' commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-14 Alexander PopovDon't use TODO to avoid pylint warnings 136/head commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-14 Alexander PopovCI: add pylint commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-14 Alexander PopovDrop 'disable=invalid-name' for pylint commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-14 Alexander PopovDrop __about__.py and use 'version = attr:' in setup.cfg commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovCI: Add the mypy arguments to the WoodPecker CI commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovMerge branch 'typing' commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovCI: Put mypy into a separate workflow and add some... 121/head commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovIntroduce ResultType and improve static typing in test_... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovImprove the VersionCheck static typing commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovImprove typing and drop the unused **kwargs in the... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovImprove _open() to avoid mypy and pylint warnings commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovCI: Check static typing with mypy during the functional... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovStyle fixes for engine import commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovUse dict instead of OrderedDict commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovAdd more typing annotations to test_engine.py commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovFix mypy typing warnings for ChecklistObjType commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovAdd more precise typing for checklist: List[ChecklistOb... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovFix assertion style commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovFix mypy typing warnings in engine.py commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovAdd more typing annotations to engine.py commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-13 Alexander PopovMove print_unknown_options() to engine.py commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-12 Alexander PopovAdd more precise typing for OrderedDict commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-12 Alexander PopovAdd more typing annotations to checks.py commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-12 Alexander PopovMake the static typing work for Python v3.8 commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-12 Alexander PopovFix mypy typing warnings in __init__.py commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-12 Alexander PopovAdd more typing annotations to __init__.py commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-12 Alexander PopovFix pylint warnings in _open commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-12 jvoisinAdd a check to `_open` commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-12 Alexander PopovFix mypy warning in _open() commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-12 Alexander PopovFix mypy warning in json_dump() commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-03 jvoisinAdd a check for CONFIG_UNWIND_PATCH_PAC_INTO_SCS commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-03 Julien VoisinMerge branch 'master' into typing commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-03 Alexander PopovCI: Don't run the tests with coverage control for pull... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Alexander PopovCI: Add a functional test without collecting coverage... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Alexander PopovCI: Fix the name of engine_unit-test_no_coverage (II) commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Alexander PopovCI: Fix the name of engine_unit-test_no_coverage commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Alexander PopovCI: Add a unit-test without collecting coverage (tired... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Alexander PopovMerge branch 'skip_sysctl' commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Alexander PopovStyle fixes, should be no functional changes 125/head commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Alexander PopovFix the reason and decision of the KEXEC_CORE check commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Alexander PopovFix the reason and decision of the BPF_JIT check commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Alexander PopovRestore the `dev.tty.legacy_tiocsti` check commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Alexander PopovUse CONFIG_LOCALVERSION instead of CONFIG_DEFAULT_INIT... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Eneas U de... skip kernel.modules_disabled if MODULES not set commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Eneas U de... Skip unprivileged_userfaultfd if USERFAULTFD unset commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Eneas U de... Don't fail if dev.tty.legacy_tiocsti not found commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Eneas U de... Skip unprivileged_bpf_disabled if BPF_SYSCALL not set commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Eneas U de... Skip kexec_load_disabled if KEXEC_CORE is not set commit | commitdiff | tree | snapshot (zip tar.gz)
2024-05-02 Eneas U de... Skip bpf_jit_harden sysctl if BPF_JIT is not set commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-30 Alexander PopovMerge branch 'cpu_depend' commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-30 jvoisinAdd some lightweight typing commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-30 Alexander PopovFix the reason and decision for CPU_SUP_INTEL 123/head commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-30 Alexander PopovStyle fixes commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-23 Eneas U de... Skip CPU-dependent checks if CPU is not supported commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-21 Alexander PopovLike grep, colorize the output only if stdout is connec... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-21 Alexander PopovDon't use the `type` name for the class methods commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-18 Alexander PopovAdd the BLK_DEV_WRITE_MOUNTED/bdev_allow_write_mounted... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-17 Alexander PopovCI: codecov-action@v3.1.5 with token doesn't work well... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-17 Alexander PopovCI: Return to codecov-action@v3.1.5, but with tokens commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-17 Alexander PopovCI: Update python versions commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-17 Alexander PopovAdd the links to the corresponding codecov pages in... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-17 Alexander PopovCI: Move to codecov-action@4 commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-17 Alexander PopovCI: Move to codecov-action@v3.1.5 commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-17 Alexander PopovMerge branch 'shstk' commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-17 Alexander PopovFix 'decision' for the X86_USER_SHADOW_STACK check 120/head commit | commitdiff | tree | snapshot (zip tar.gz)
2024-04-15 jvoisinAdd a check for X86_USER_SHADOW_STACK commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-30 Alexander PopovAdd a comment that 'user.max_user_namespaces=0' may... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-25 Alexander PopovUpdate the README commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-25 Alexander PopovImprove the CONFIG_CFI_CLANG checks (add the CONFIG_CC_... commit | commitdiff | tree | snapshot (zip tar.gz)
2024-03-25 Alexander PopovDrop the GCC_PLUGINS check (checking CC_IS_GCC is enough) commit | commitdiff | tree | snapshot (zip tar.gz)
next
kconfig-hardened-check