projects / kconfig-hardened-check.git / shortlog
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
kconfig-hardened-check.git
2022-09-02 Alexander PopovDetect the compiler used for the kernel compilation commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovDon't use CONFIG_CC_IS_GCC in the checks (it was introd... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovMove get-nix-kconfig.py to kconfig_hardened_check/confi... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovFix the X86_SMAP check: it is enabled by default since... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovCheck the nosmap and nosmep cmdline parameters commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovAdapt the RANDSTRUCT checks to the changes in Linux... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovFix the comment: SHADOW_CALL_STACK is now available... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-09-02 Alexander PopovAdd the SECURITY_LANDLOCK recommendation by KSPP commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-23 Alexander PopovCheck the nokaslr cmdline parameter commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-20 Alexander PopovRequire GCC for the GCC plugins (part II) commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-20 Alexander PopovRequire GCC for the GCC plugins commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-20 Alexander PopovIntroduce cc_is_gcc and cc_is_clang commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-20 Alexander PopovNo, the 'page_alloc.shuffle' should be set anyway commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-20 Alexander PopovDrop the comment about slub_debug=FZ commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-17 Alexander PopovAdd the debugfs check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-17 Alexander PopovImprove the comments commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-17 Alexander PopovAdd the 'page_alloc.shuffle' check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-14 Alexander PopovAdd more values for the normalization commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-14 Alexander PopovImplement the normalization of cmdline options commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-14 Alexander PopovDescribe the meaning of the checks commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-13 Alexander PopovCheck the 'rodata' cmdline parameter on the arches... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-13 Alexander PopovCheck hardened_usercopy in the cmdline commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-13 Alexander PopovAdd the comment about vm.mmap_min_addr sysctl (for... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-08-13 Alexander PopovSECURITY_DMESG_RESTRICT is more about cutting attack... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-07-21 Alexander PopovImprove the slab_common.usercopy_fallback check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-07-21 Alexander PopovAdd the slab_common.usercopy_fallback check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-07-21 Alexander PopovImprove the STACKPROTECTOR check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-07-21 Alexander PopovDon't mention LKDTM commit | commitdiff | tree | snapshot (zip tar.gz)
2022-07-17 Alexander PopovAdd info about the LKDDb project by @cateee commit | commitdiff | tree | snapshot (zip tar.gz)
2022-07-17 Alexander PopovCheck ARM64_BTI for userspace hardening commit | commitdiff | tree | snapshot (zip tar.gz)
2022-07-17 Alexander PopovCheck ARM64_PTR_AUTH for userspace hardening commit | commitdiff | tree | snapshot (zip tar.gz)
2022-07-17 Alexander PopovAdd rodata check for ARM64 commit | commitdiff | tree | snapshot (zip tar.gz)
2022-07-11 Alexander PopovAdd iommu.passthrough check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-07-11 Alexander PopovAdd IOMMU_DEFAULT_PASSTHROUGH check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-07-11 Alexander PopovAdd iommu.strict check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-07-11 Alexander PopovAdd vsyscall check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-07-09 Alexander PopovDon't add CmdlineChecks in add_kconfig_checks() to... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-07-09 Alexander PopovAdd slub_debug check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-07-08 Alexander PopovAdd the release badge commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-20 Alexander PopovAdd the init_on_free check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-20 Alexander PopovAdd the page_poison check required for PAGE_POISONING_ZERO commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-20 Alexander PopovRewrite the slab_nomerge check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-20 Alexander PopovRewrite the randomize_kstack_offset check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-19 Alexander PopovCheck that a kconfig option value is sane commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-19 Alexander PopovAdd a tricky check for init_on_alloc and INIT_ON_ALLOC_... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-19 Alexander PopovMove the add_cmdline_checks() call earlier commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-08 Alexander PopovDon't check __name__ in __init__.py (it can't run separ... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-08 Alexander PopovFix the pylint warning about isinstance commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-08 Alexander PopovDrop unneeded properties of ComplexOptCheck commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-08 Alexander PopovTurn some error conditions into assertions (part 4) commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-08 Alexander PopovTurn some error conditions into assertions (part 3) commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-08 Alexander PopovTurn some error conditions into assertions (part 2) commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-08 Alexander PopovTurn some error conditions into assertions (part 1) commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-08 Alexander PopovDrop useless checks, the ComplexOptCheck constructor... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-08 Alexander Popovgithub actions: Test error handling (part 2) commit | commitdiff | tree | snapshot (zip tar.gz)
2022-06-08 Alexander Popovgithub actions: Test error handling (part 1) commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-30 Alexander Popovgithub actions: Collect coverage for error handling... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-30 Alexander Popovgithub actions: upgrade to codecov-action@v2 commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-30 Alexander PopovCheck that --config and --print are not used together commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-30 Alexander Popovgithub actions: Collect coverage for cmdline checking commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-30 Alexander Popovgithub actions: Improve the descriptions commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-30 Alexander Popovgithub actions: Improve the test output commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-30 Alexander PopovDrop dash-separated values from setup.cfg commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-30 Alexander Popovgithub actions: Add testing with python 3.9 commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-28 Alexander PopovMerge branch 'cmdline' commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-28 Alexander PopovChange the example output in README cmdline commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-28 Alexander PopovDescribe the cmdline checking support in README commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-28 Alexander PopovAdd the example config of Fedora 34 commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-28 Alexander PopovCheck the pti cmdline parameter commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-28 Alexander PopovCheck the slab_nomerge cmdline parameter commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-28 Alexander PopovCheck the randomize_kstack_offset cmdline parameter commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-28 Alexander PopovAdd cmdline file parsing commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-28 Alexander PopovAdd the infrastructure for cmdline checks commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-28 Alexander PopovAdd '--cmdline' argument for the tool commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-28 Alexander PopovAdd cmdline checks to '--print' commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-28 Alexander PopovAdd the CmdlineCheck class commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-15 Alexander PopovAdd the comment about sysrq_always_enabled commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-15 Alexander PopovAdd the comment about rodata commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-08 Alexander PopovUpdate direct feedback from Linux kernel maintainers... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-06 Alexander PopovAdd the comment about arm64.nomte commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-06 Alexander PopovAdd the comment about kernel.randomize_va_space commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-06 Alexander PopovAdd the KGDB check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-05-06 Alexander PopovAdd RANDOMIZE_MODULE_REGION_FULL for arm64 commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-28 Alexander PopovUpdate the README v0.5.17 commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-28 Alexander PopovMerge pull request #62 from evdenis/master commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-28 Alexander PopovAdd the type property for OptCheck to fix a pylint... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-27 Denis EfremovAdd BLK_DEV_FD_RAWCMD 62/head commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-22 Alexander PopovAdd the STACKPROTECTOR check from KSPP commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-22 Alexander PopovDrop the ARM64_MTE check for userspace hardening commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-22 Alexander PopovSeparate out checking SECURITY_WRITABLE_HOOKS and SECUR... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-22 Alexander PopovFix the arch condition for the SCHED_CORE check commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-22 Alexander PopovAdd the KSPP recommendation of ZERO_CALL_USED_REGS commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-22 Alexander PopovDisabling X86_MSR is recommended by KSPP commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-20 Alexander PopovFix the bug in the verdict description for ComplexOptCheck commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-20 Alexander PopovAdditional check for TYPES_OF_CHECKS commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-20 Alexander PopovDrop PresenceCheck; OptCheck without 'expected' paramet... commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-20 Alexander PopovUpdate the KSPP recommendations in the config_files commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-20 Alexander PopovAdd the KSPP recommendation of SCHED_CORE commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-20 Alexander PopovAdd the KSPP recommendation of IOMMU_DEFAULT_DMA_STRICT commit | commitdiff | tree | snapshot (zip tar.gz)
2022-04-20 Alexander PopovAdd the KSPP recommendation of WERROR commit | commitdiff | tree | snapshot (zip tar.gz)
next
kconfig-hardened-check