kconfig-hardened-check.git
2022-12-10 Alexander PopovDrop the comment about mitigations of CPU vulnerabilities
2022-12-10 Alexander PopovSave the list of disabled mitigations of CPU vulnerabil...
2022-12-10 Alexander PopovAdd the nospectre_bhb check
2022-12-10 Alexander PopovAdd the kpti check
2022-12-10 Alexander PopovCompare against '0' in the 'is not off' check
2022-12-10 Alexander PopovAdd the tsx check
2022-12-10 Alexander PopovChange the 'decision' of X86_INTEL_TSX_MODE_OFF check...
2022-12-10 Alexander PopovAdd the nomte check
2022-12-10 Alexander PopovAdd the nopauth check
2022-12-10 Alexander PopovAdd the nobti check
2022-12-09 Alexander PopovAdd the sysrq_always_enabled check
2022-12-09 Alexander PopovAdd the ssbd check
2022-12-08 Alexander PopovAvoid the YAML parsing mistake
2022-12-08 Alexander PopovFix `python-version` in the GitHub Actions
2022-12-08 Alexander PopovReorder some checks, no functional changes
2022-11-17 Alexander PopovAdd the srbds check
2022-11-17 Alexander PopovAdd the retbleed check
2022-11-17 Alexander PopovAdd the mmio_stale_data check
2022-11-17 Alexander PopovAdd the tsx_async_abort check
2022-11-17 Alexander PopovAdd the mds check
2022-11-17 Alexander PopovAdd the l1tf check
2022-11-17 Alexander PopovAdd the spectre_v2_user check
2022-11-17 Alexander PopovDo refactoring in normalize_cmdline_options()
2022-11-17 Alexander PopovAdd the spec_store_bypass_disable check
2022-11-17 Alexander PopovAdd the spectre_v2 check
2022-11-17 Alexander PopovIntroduce the 'is present' check instead of expected...
2022-11-11 Alexander PopovAdd the 'mitigations' check
2022-11-09 Alexander PopovAdd the nosmt check
2022-11-09 Alexander PopovAdd a special 'desired val' -- 'is not off'
2022-11-09 Alexander PopovImprove the result descriptions
2022-11-08 Alexander PopovAdd assertions to check arguments of the Class constructors
2022-10-23 Alexander PopovUpdate the README
2022-10-23 Alexander PopovAdd the ARM64_E0PD check
2022-10-23 Alexander PopovFix the SCHED_CORE check: it's now available for ARM64...
2022-10-23 Alexander PopovUpdate the self-protection checks adopted by KSPP ...
2022-10-22 Alexander PopovUpdate the self-protection checks adopted by KSPP ...
2022-10-22 Alexander PopovUpdate the self-protection checks adopted by KSPP ...
2022-10-22 Alexander PopovUpdate the KSPP recommendations again
2022-10-13 Alexander PopovUpdate the self-protection checks adopted by KSPP ...
2022-10-13 Alexander PopovUpdate the self-protection checks adopted by KSPP ...
2022-10-13 Alexander PopovUpdate the HW_RANDOM_TPM check
2022-10-13 Alexander PopovUpdate the UBSAN checks according to the KSPP recommend...
2022-10-13 Alexander PopovUpdate the security policy checks adopted by KSPP
2022-10-13 Alexander PopovUpdate the KSPP recommendations
2022-10-12 Alexander PopovImprove the README
2022-10-09 Alexander PopovUpdate the README
2022-10-09 Alexander PopovDrop some of my security policy recommendations
2022-10-09 Alexander PopovCheck SECURITY_SELINUX_DEVELOP (recommended by Clip OS)
2022-10-09 Alexander PopovCheck SECURITY_SELINUX_BOOTPARAM (recommended by Clip OS)
2022-10-09 Alexander PopovImprove the HW_RANDOM_TPM check
2022-10-09 Alexander PopovCheck COREDUMP (recommended by Clip OS)
2022-10-09 Alexander PopovCheck CONFIG_HW_RANDOM_TPM (recommended by Clip OS)
2022-10-09 Alexander PopovCheck X86_MCE, X86_MCE_INTEL, X86_MCE_AMD (recommended...
2022-10-09 Alexander PopovImprove the README
2022-10-07 Alexander PopovUpdate the README
2022-10-02 Alexander PopovAlso check 'nospectre_v2' with 'spectre_v2'
2022-10-02 Alexander PopovChange the reason for the 'nopti' check
2022-10-02 Alexander PopovChange the reason for the 'nokaslr' check
2022-10-02 Alexander PopovAdd the 'spectre_v2' check
2022-10-02 Alexander PopovAdd the 'nospectre_v2' check
2022-10-02 Alexander PopovChange the reason for the 'nosmep' and 'nosmap' checks
2022-10-02 Alexander PopovAdd the 'nospectre_v1' check
2022-10-02 Alexander PopovAdd the 'nopti' check
2022-09-24 Alexander PopovAdd the comments: CC_IS_GCC and CC_IS_CLANG exist since...
2022-09-24 Alexander PopovAdd the UBSAN_LOCAL_BOUNDS check for Clang build
2022-09-18 Alexander PopovUpdate the links to AOSP and GKI
2022-09-02 Alexander PopovUpdate the README
2022-09-02 Alexander PopovDetect the compiler used for the kernel compilation
2022-09-02 Alexander PopovDon't use CONFIG_CC_IS_GCC in the checks (it was introd...
2022-09-02 Alexander PopovMove get-nix-kconfig.py to kconfig_hardened_check/confi...
2022-09-02 Alexander PopovFix the X86_SMAP check: it is enabled by default since...
2022-09-02 Alexander PopovCheck the nosmap and nosmep cmdline parameters
2022-09-02 Alexander PopovAdapt the RANDSTRUCT checks to the changes in Linux...
2022-09-02 Alexander PopovFix the comment: SHADOW_CALL_STACK is now available...
2022-09-02 Alexander PopovAdd the SECURITY_LANDLOCK recommendation by KSPP
2022-08-23 Alexander PopovCheck the nokaslr cmdline parameter
2022-08-20 Alexander PopovRequire GCC for the GCC plugins (part II)
2022-08-20 Alexander PopovRequire GCC for the GCC plugins
2022-08-20 Alexander PopovIntroduce cc_is_gcc and cc_is_clang
2022-08-20 Alexander PopovNo, the 'page_alloc.shuffle' should be set anyway
2022-08-20 Alexander PopovDrop the comment about slub_debug=FZ
2022-08-17 Alexander PopovAdd the debugfs check
2022-08-17 Alexander PopovImprove the comments
2022-08-17 Alexander PopovAdd the 'page_alloc.shuffle' check
2022-08-14 Alexander PopovAdd more values for the normalization
2022-08-14 Alexander PopovImplement the normalization of cmdline options
2022-08-14 Alexander PopovDescribe the meaning of the checks
2022-08-13 Alexander PopovCheck the 'rodata' cmdline parameter on the arches...
2022-08-13 Alexander PopovCheck hardened_usercopy in the cmdline
2022-08-13 Alexander PopovAdd the comment about vm.mmap_min_addr sysctl (for...
2022-08-13 Alexander PopovSECURITY_DMESG_RESTRICT is more about cutting attack...
2022-07-21 Alexander PopovImprove the slab_common.usercopy_fallback check
2022-07-21 Alexander PopovAdd the slab_common.usercopy_fallback check
2022-07-21 Alexander PopovImprove the STACKPROTECTOR check
2022-07-21 Alexander PopovDon't mention LKDTM
2022-07-17 Alexander PopovAdd info about the LKDDb project by @cateee
2022-07-17 Alexander PopovCheck ARM64_BTI for userspace hardening
2022-07-17 Alexander PopovCheck ARM64_PTR_AUTH for userspace hardening
2022-07-17 Alexander PopovAdd rodata check for ARM64
2022-07-11 Alexander PopovAdd iommu.passthrough check
next