jxself.org public git repositories - kconfig-hardened-check.git/history

projects / kconfig-hardened-check.git / history

[kconfig-hardened-check.git] / kernel_hardening_checker / checks.py

2023-12-09	Alexander Popov	Add the CPU_SRSO check	blob \| commitdiff \| raw
2023-12-09	Alexander Popov	Add the SPECULATION_MITIGATIONS check	blob \| commitdiff \| raw \| diff to current
2023-12-09	Alexander Popov	Add the spec_rstack_overflow check	blob \| commitdiff \| raw \| diff to current
2023-12-09	Alexander Popov	Add the MODULE_FORCE_LOAD check	blob \| commitdiff \| raw \| diff to current
2023-12-02	Alexander Popov	Add the check for dis_ucode_ldr	blob \| commitdiff \| raw \| diff to current
2023-12-02	Alexander Popov	Add the MICROCODE_INTEL and MICROCODE_AMD checks	blob \| commitdiff \| raw \| diff to current
2023-12-02	Alexander Popov	Add a check for the 'kfence.sample_interval' boot parameter	blob \| commitdiff \| raw \| diff to current
2023-12-02	Alexander Popov	Add the KFENCE_SAMPLE_INTERVAL check	blob \| commitdiff \| raw \| diff to current
2023-12-02	Alexander Popov	Keep the recommendation to disable kernel modules	blob \| commitdiff \| raw \| diff to current
2023-12-02	Alexander Popov	Add a comment about 'kernel.modules_disabled'	blob \| commitdiff \| raw \| diff to current
2023-10-18	Alexander Popov	Fix the reason for the 'kernel.yama.ptrace_scope' check	blob \| commitdiff \| raw \| diff to current
2023-10-17	Alexander Popov	Fix the reason for the nosmt check	blob \| commitdiff \| raw \| diff to current
2023-10-17	Alexander Popov	Add the 'dev.tty.legacy_tiocsti' check	blob \| commitdiff \| raw \| diff to current
2023-10-17	Alexander Popov	Add the 'kernel.randomize_va_space' check	blob \| commitdiff \| raw \| diff to current
2023-10-17	Alexander Popov	Add the 'fs.suid_dumpable' check	blob \| commitdiff \| raw \| diff to current
2023-10-17	Alexander Popov	Change the reason of the COREDUMP check	blob \| commitdiff \| raw \| diff to current
2023-10-17	Alexander Popov	Add the 'fs.protected_regular' check	blob \| commitdiff \| raw \| diff to current
2023-10-17	Alexander Popov	Add the 'fs.protected_fifos' check	blob \| commitdiff \| raw \| diff to current
2023-10-17	Alexander Popov	Add the 'fs.protected_hardlinks' check	blob \| commitdiff \| raw \| diff to current
2023-10-17	Alexander Popov	Add the 'fs.protected_symlinks' check	blob \| commitdiff \| raw \| diff to current
2023-10-17	Alexander Popov	Add the 'vm.unprivileged_userfaultfd' check	blob \| commitdiff \| raw \| diff to current
2023-10-17	Alexander Popov	Add the 'kernel.yama.ptrace_scope' check	blob \| commitdiff \| raw \| diff to current
2023-10-17	Alexander Popov	Add the 'kernel.kptr_restrict' check	blob \| commitdiff \| raw \| diff to current
2023-10-17	Alexander Popov	Improve the slab_common.usercopy_fallback check	blob \| commitdiff \| raw \| diff to current
2023-10-17	Alexander Popov	hardened_usercopy=1 is now officially recommended by...	blob \| commitdiff \| raw \| diff to current
2023-10-16	Alexander Popov	Enabling page_alloc.shuffle is now recommended by KSPP	blob \| commitdiff \| raw \| diff to current
2023-10-16	Alexander Popov	'mitigations=auto,nosmt' is now recommended by KSPP	blob \| commitdiff \| raw \| diff to current
2023-10-16	Alexander Popov	Disabling X86_VSYSCALL_EMULATION is now recommended...	blob \| commitdiff \| raw \| diff to current
2023-10-16	Alexander Popov	Use /usr/bin/env in shebangs (#90)	blob \| commitdiff \| raw \| diff to current
2023-10-05	Sandro Jäckel	Use /usr/bin/env in shebangs 90/head	blob \| commitdiff \| raw \| diff to current
2023-10-04	Alexander Popov	Drop ZERO_CALL_USED_REGS in favour of backward-edge CFI	blob \| commitdiff \| raw \| diff to current
2023-09-17	Alexander Popov	Rename kconfig-hardened-check into kernel-hardening...	blob \| commitdiff \| raw \| diff to current
2023-09-17	Alexander Popov	kconfig-hardened-check -> kernel-hardening-checker	blob \| commitdiff \| raw \| diff to current

kconfig-hardened-check

RSS Atom