projects
/
kconfig-hardened-check.git
/ shortlog
commit
grep
author
committer
pickaxe
?
search:
re
summary
| shortlog |
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
kconfig-hardened-check.git
11 days ago
Alexander Popov
distros: Remove Pentoo
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
11 days ago
Alexander Popov
distros: Remove AmazonLinux2
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
11 days ago
Alexander Popov
distros: Remove Alpinelinux
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
11 days ago
Alexander Popov
get_kconfigs.sh: Stop on failure
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
11 days ago
Alexander Popov
get_kconfigs.sh: Make it verbose
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
11 days ago
Alexander Popov
get_kconfigs.sh: Simplify the code
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
11 days ago
Alexander Popov
get_kconfigs.sh: Rename distro variable
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
11 days ago
Alexander Popov
get_kconfigs.sh: Fix the Azure Linux link (use v3.0)
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
11 days ago
Alexander Popov
get_kconfigs.sh: Improve Arch kconfig naming
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
11 days ago
Alexander Popov
get_kconfigs.sh: Drop Clearlinux (looks like it's not...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
11 days ago
Alexander Popov
get_kconfigs.sh: Use Fedora 41 Updates and drop Fedora...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
11 days ago
Alexander Popov
get_kconfigs.sh: Use CentOS Stream (more popular than...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
11 days ago
Willenst
Add script to update kconfigs
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-16
Alexander Popov
Update README
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-16
Alexander Popov
Add some cases to improve CI test coverage
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-16
Alexander Popov
Merge branch 'autodetect2'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-16
Alexander Popov
Test the autodetection
163/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-16
Alexander Popov
Don't exit from perform_checking()
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-16
Alexander Popov
Add the mprint() wrapper
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-16
Alexander Popov
Handle the case of denied permission in the autodetect...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-09
Alexander Popov
Rework the prototype
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-09
Alexander Popov
Minor renaming
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-09
Alexander Popov
Improve the help message and arguments handling
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-09
jvoisin
Add an --autodetect option
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-09
Alexander Popov
Check either CONFIG_LIST_HARDENED or CONFIG_DEBUG_LIST
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-09
Alexander Popov
Merge branch 'arch_mmap_rnd'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-09
Alexander Popov
Skip the `CONFIG_ARCH_MMAP_RND_COMPAT_BITS` option...
164/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-09
Alexander Popov
Style fixes
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-11-09
Alexander Popov
Clever trick to drop some code
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-27
valera disgrace
implementation of arch_mmap_rnd checks
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-21
Alexander Popov
Don't crash if `sysctl.conf` has no options for parsing
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-12
Alexander Popov
Update python versions in CI
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-12
Alexander Popov
Add the SECCOMP_CACHE_DEBUG check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-08
Alexander Popov
Merge branch 'from-flipthewho'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-07
flipthewho
implementation of vm.mmap_min_addr check
157/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-06
Alexander Popov
Improve the output
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-06
Alexander Popov
Drop some unneeded assertions
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-06
Alexander Popov
Use perform_checking() for separate sysctl checking
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-06
Alexander Popov
Add perform_checking()
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-06
Alexander Popov
Reorder populating the checklist with data
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-06
Alexander Popov
Detect the kernel version before the arch
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-06
Alexander Popov
Add thanks!
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-06
Alexander Popov
Improve the functional test coverage
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-06
Alexander Popov
Fix the sysctl.conf test at github
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-06
Alexander Popov
Improve and reorder the functional tests
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-06
Alexander Popov
Drop some duplicated code (thanks to the coverage report)
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-06
Alexander Popov
Handle empty files properly
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-06
Alexander Popov
engine: Improve the object oriented model
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-03
Alexander Popov
Merge branch 'from-flipthewho'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-10-03
Alexander Popov
style fix
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-26
flipthewho
implementation of detect_arch_sysctl()
161/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-10
Alexander Popov
Merge branch 'from-flipthewho-1'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-10
Alexander Popov
Style fixes
156/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-09
flipthewho
implementation of `CONFIG_CFI_AUTO_DEFAULT`
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-04
Alexander Popov
Merge branch 'sysctl-fixes'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-04
Alexander Popov
sysctl parsing: change parsing errors to warnings and...
sysctl-fixes
160/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-04
Alexander Popov
sysctl parsing: Allow comments (they usually exist...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-04
Alexander Popov
sysctl parsing: Allow missing space before '='
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-04
Alexander Popov
Drop the UNWIND_PATCH_PAC_INTO_SCS recommendation for now
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Ready for the release 0.6.10
v0.6.10
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Update issues.md
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Update the README
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Fix style (quotation marks)
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Update the NixOS kernel configs
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Don't normalize the `cfi` cmdline parameter
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Split the cut_attack_surface checks that contain the...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Update the BCACHE_CLOSURES_DEBUG check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Fix `if arch` for the 'mitigations' cmdline check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Remove `if arch` for the CPU_MITIGATIONS check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Remove `if arch` for the X86_VSYSCALL_EMULATION check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Add the ARM_SMMU* kconfig checks for ARM
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Update the DEBUG_WX check for ARM64 and ARM
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Add `if arch` for PAGE_TABLE_CHECK*
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Update the AMD_IOMMU_V2 kconfig check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-09-01
Alexander Popov
Update the UBSAN_SANITIZE_ALL kconfig check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-29
Alexander Popov
Merge branch 'from-willenst-1'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-28
Alexander Popov
unittest: test VersionCheck.table_print() to hit the...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-28
Alexander Popov
Merge branch 'from-willenst-2'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-27
Willenst
remove engine debug output
155/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-27
Willenst
Add test for `colorize_result`
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-27
Willenst
Add test for `print_unknown_options`
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-26
Willenst
Add io_uring_disabled sysctl check
152/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-19
Alexander Popov
Merge branch 'from-jvoisin'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-19
Alexander Popov
Add the `TEST_DEBUG_VIRTUAL` kconfig check
138/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-19
Alexander Popov
Change the `reason` for the `IP_SCTP` and `KGDB` kconfi...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-19
Alexander Popov
Remove the `PAGE_OWNER` kconfig check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-19
Alexander Popov
Disabling VCAP_KUNIT_TEST and BUILD_SALT doesn't look...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-19
Alexander Popov
Fix the check order, no functional changes
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-19
Alexander Popov
Introduce the ARM_PTDUMP_DEBUGFS check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-19
Alexander Popov
Merge branch 'master' into from-jvoisin
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-18
Alexander Popov
Merge remote-tracking branch 'citypw/patch-1'
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-11
Shawn C
Add ARM SMMU check options
150/head
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-11
Alexander Popov
Add missing UBSAN_SIGNED_WRAP mentioned in kernel/confi...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-11
Alexander Popov
Improve the CONFIG_GCC_PLUGIN_STRUCTLEAK check
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-11
Alexander Popov
Update the KSPP recommendations (II)
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-11
Alexander Popov
Update the KSPP recommendations
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-11
Alexander Popov
Add the comments about `vm.mmap_rnd_bits` and `vm.mmap_...
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-11
Alexander Popov
Mark the sysrq checks as GrapheneOS recommendations
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-11
Alexander Popov
Reorder some checks
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
2024-08-10
Alexander Popov
Improve the reflections on CONFIG_PANIC_ON_OOPS
commit
|
commitdiff
|
tree
| snapshot (
zip
tar.gz
)
next