kconfig-hardened-check.git
2024-08-19 Alexander PopovDisabling VCAP_KUNIT_TEST and BUILD_SALT doesn't look...
2024-08-19 Alexander PopovFix the check order, no functional changes
2024-08-19 Alexander PopovIntroduce the ARM_PTDUMP_DEBUGFS check
2024-08-19 Alexander PopovMerge branch 'master' into from-jvoisin
2024-08-18 Alexander PopovMerge remote-tracking branch 'citypw/patch-1'
2024-08-11 Shawn CAdd ARM SMMU check options 150/head
2024-08-11 Alexander PopovAdd missing UBSAN_SIGNED_WRAP mentioned in kernel/confi...
2024-08-11 Alexander PopovImprove the CONFIG_GCC_PLUGIN_STRUCTLEAK check
2024-08-11 Alexander PopovUpdate the KSPP recommendations (II)
2024-08-11 Alexander PopovUpdate the KSPP recommendations
2024-08-11 Alexander PopovAdd the comments about `vm.mmap_rnd_bits` and `vm.mmap_...
2024-08-11 Alexander PopovMark the sysrq checks as GrapheneOS recommendations
2024-08-11 Alexander PopovReorder some checks
2024-08-10 Alexander PopovImprove the reflections on CONFIG_PANIC_ON_OOPS
2024-08-10 Alexander PopovAdd the LKDTM check
2024-07-29 Alexander PopovAdd defconfigs for Linux v6.10
2024-07-28 Alexander PopovMerge branch 'simp_detect_arch'
2024-07-16 jvoisinSimplify a bit the detect_arch function 148/head
2024-07-07 Alexander PopovAdd the FAULT_INJECTION check
2024-07-07 Alexander PopovAdd the CONFIG_N_GSM check
2024-07-07 Alexander PopovAdd the CRASH_DUMP check
2024-07-07 Alexander PopovUpdate the `kfence.sample_interval` check
2024-07-06 Alexander PopovAllow the empty values for Kconfig options
2024-07-06 Alexander PopovAdd the missing SPDX info
2024-07-06 Alexander PopovImprove the README
2024-07-06 Alexander PopovSpecify the `GPL-3.0-only` license explicitly
2024-07-03 Alexander PopovUpdate the `decision` for the SLAB_MERGE_DEFAULT check
2024-07-03 Alexander PopovUpdate the KFENCE_SAMPLE_INTERVAL check
2024-06-28 Julien VoisinMerge branch 'master' into grsecurity
2024-06-19 Alexander PopovComment out the RANDSTRUCT_PERFORMANCE check
2024-06-19 Alexander PopovUpdate the KSPP recommendations (https://github.com...
2024-06-16 Alexander PopovUpdate the 'kernel.modules_disabled' check
2024-06-16 Alexander PopovAdd the 'kernel.oops_limit' and 'kernel.warn_limit...
2024-06-16 Alexander PopovAdd the "cfi" check
2024-06-16 Alexander PopovAdd the "MAGIC_SYSRQ_SERIAL" check
2024-06-16 Alexander PopovAdd the "kernel.sysrq" check
2024-06-15 Alexander PopovAdd the MAGIC_SYSRQ_DEFAULT_ENABLE check
2024-06-15 Alexander PopovSync with KSPP: update the `decision` for some checks
2024-06-15 Alexander PopovAdd CONFIG_CC_IS_CLANG and CONFIG_CC_IS_GCC to the...
2024-06-15 Alexander Popovruff: Fix EXE001 "Shebang is present but file is not...
2024-06-10 Alexander PopovAdd the comment about 'if arch' for the 'cut_attack_sur...
2024-06-10 Alexander PopovUpdate the KSPP recommendations
2024-06-10 Alexander PopovCode refactoring to improve test coverage (II)
2024-06-10 Alexander PopovCode refactoring to improve test coverage (I)
2024-06-09 Alexander PopovMerge branch 'scs-pac'
2024-06-09 Alexander PopovMerge branch 'page-table-check'
2024-06-02 Alexander PopovMerge branch 'open_check'
2024-06-02 Alexander PopovCI: Add the test for the code checking that the cmdline... 134/head
2024-06-02 Alexander PopovCI: Add the tests for the code checking that the config...
2024-06-02 Alexander PopovCheck that the cmdline file is not empty
2024-06-02 Alexander PopovAlso check that the cmdline file and sysctl file exist
2024-06-02 Alexander PopovMerge branch 'master' into open-check
2024-06-02 Alexander PopovCheck MITIGATION_SPECTRE_BHI and spectre_bhi
2024-06-02 Alexander PopovCheck MITIGATION_RFDS and reg_file_data_sampling
2024-06-02 Alexander PopovAdd the new name of SPECULATION_MITIGATIONS
2024-06-02 Alexander PopovAdd the new names of RETPOLINE, CPU_SRSO, SLS
2024-06-02 Alexander PopovAdd the new name of PAGE_TABLE_ISOLATION
2024-05-22 jvoisinAdd two PAGE_TABLE_CHECK related checks from kspp 140/head
2024-05-19 Julien VoisinMerge branch 'master' into scs_pac 131/head
2024-05-17 jvoisinAdd a couple of grsecurity disabled options
2024-05-14 Alexander PopovMerge remote-tracking branch 'origin/pylint'
2024-05-14 Alexander PopovDon't use TODO to avoid pylint warnings 136/head
2024-05-14 Alexander PopovCI: add pylint
2024-05-14 Alexander PopovDrop 'disable=invalid-name' for pylint
2024-05-14 Alexander PopovDrop __about__.py and use 'version = attr:' in setup.cfg
2024-05-13 Alexander PopovCI: Add the mypy arguments to the WoodPecker CI
2024-05-13 Alexander PopovMerge branch 'typing'
2024-05-13 Alexander PopovCI: Put mypy into a separate workflow and add some... 121/head
2024-05-13 Alexander PopovIntroduce ResultType and improve static typing in test_...
2024-05-13 Alexander PopovImprove the VersionCheck static typing
2024-05-13 Alexander PopovImprove typing and drop the unused **kwargs in the...
2024-05-13 Alexander PopovImprove _open() to avoid mypy and pylint warnings
2024-05-13 Alexander PopovCI: Check static typing with mypy during the functional...
2024-05-13 Alexander PopovStyle fixes for engine import
2024-05-13 Alexander PopovUse dict instead of OrderedDict
2024-05-13 Alexander PopovAdd more typing annotations to test_engine.py
2024-05-13 Alexander PopovFix mypy typing warnings for ChecklistObjType
2024-05-13 Alexander PopovAdd more precise typing for checklist: List[ChecklistOb...
2024-05-13 Alexander PopovFix assertion style
2024-05-13 Alexander PopovFix mypy typing warnings in engine.py
2024-05-13 Alexander PopovAdd more typing annotations to engine.py
2024-05-13 Alexander PopovMove print_unknown_options() to engine.py
2024-05-12 Alexander PopovAdd more precise typing for OrderedDict
2024-05-12 Alexander PopovAdd more typing annotations to checks.py
2024-05-12 Alexander PopovMake the static typing work for Python v3.8
2024-05-12 Alexander PopovFix mypy typing warnings in __init__.py
2024-05-12 Alexander PopovAdd more typing annotations to __init__.py
2024-05-12 Alexander PopovFix pylint warnings in _open
2024-05-12 jvoisinAdd a check to `_open`
2024-05-12 Alexander PopovFix mypy warning in _open()
2024-05-12 Alexander PopovFix mypy warning in json_dump()
2024-05-03 jvoisinAdd a check for CONFIG_UNWIND_PATCH_PAC_INTO_SCS
2024-05-03 Julien VoisinMerge branch 'master' into typing
2024-05-03 Alexander PopovCI: Don't run the tests with coverage control for pull...
2024-05-02 Alexander PopovCI: Add a functional test without collecting coverage...
2024-05-02 Alexander PopovCI: Fix the name of engine_unit-test_no_coverage (II)
2024-05-02 Alexander PopovCI: Fix the name of engine_unit-test_no_coverage
2024-05-02 Alexander PopovCI: Add a unit-test without collecting coverage (tired...
2024-05-02 Alexander PopovMerge branch 'skip_sysctl'
2024-05-02 Alexander PopovStyle fixes, should be no functional changes 125/head
next