From c0b1e259c617795b72245a7a3189282944006d43 Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Sun, 17 Dec 2023 00:21:10 +0300 Subject: [PATCH] Add the CONFIG_LIST_HARDENED check --- kernel_hardening_checker/checks.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py index 5943e53..48f256c 100644 --- a/kernel_hardening_checker/checks.py +++ b/kernel_hardening_checker/checks.py @@ -229,6 +229,9 @@ def add_kconfig_checks(l, arch): # 'self_protection', 'clipos' l += [KconfigCheck('self_protection', 'clipos', 'SLAB_MERGE_DEFAULT', 'is not set')] + # 'self_protection', 'my' + l += [KconfigCheck('self_protection', 'my', 'LIST_HARDENED', 'y')] + # 'security_policy' if arch in ('X86_64', 'ARM64', 'X86_32'): l += [KconfigCheck('security_policy', 'defconfig', 'SECURITY', 'y')] -- 2.31.1