projects / kconfig-hardened-check.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
Update the NixOS configs
2024-01-15 Alexander PopovUpdate the NixOS configs
 commit | commitdiff | tree
2024-01-14 Alexander PopovDon't add options without explicitly recommended values...
commit | commitdiff | tree
2024-01-14 Alexander PopovUBSAN_SANITIZE_ALL is now available for ARM
 commit | commitdiff | tree
2023-12-30 Alexander PopovFix the order in the vdso32 check (part II)
 commit | commitdiff | tree
2023-12-30 Alexander PopovFix the order in the vdso32 check
 commit | commitdiff | tree
2023-12-30 Alexander PopovImprove the hackish refinement of the CONFIG_ARCH_MMAP_RND_B...
commit | commitdiff | tree
2023-12-30 Alexander PopovShow the option type in print_unknown_options()
 commit | commitdiff | tree
2023-12-30 Alexander PopovUse raw strings for regular expression
 commit | commitdiff | tree
2023-12-30 Alexander PopovFix the 'decision' for the 'AIO' check
 commit | commitdiff | tree
2023-12-29 Alexander PopovFix the 'decision' for the 'vdso32' check
 commit | commitdiff | tree
2023-12-29 Alexander PopovImprove the comment for the 'slab_common.usercopy_fallback...
commit | commitdiff | tree
2023-12-28 Alexander PopovFix the arch condition for the SCHED_CORE check (III)
 commit | commitdiff | tree
2023-12-28 Alexander PopovUpdate the KSPP recommendations
 commit | commitdiff | tree
2023-12-28 Alexander PopovFix the arch for the CPU_SRSO check (it's available...
commit | commitdiff | tree
2023-12-28 Alexander PopovSplit the HW_RANDOM_TPM check (it's enabled by default...
commit | commitdiff | tree
2023-12-28 Alexander PopovChange the 'decision' of the INIT_STACK_ALL_ZERO check
 commit | commitdiff | tree
2023-12-17 Alexander PopovAdd defconfigs for Linux v6.6
 commit | commitdiff | tree
2023-12-16 Alexander PopovAdd the RANDOM_KMALLOC_CACHES check
 commit | commitdiff | tree
2023-12-16 Alexander PopovAdd the SECURITY_SELINUX_DEBUG check
 commit | commitdiff | tree
2023-12-16 Alexander PopovFix the 'decision' for the LEGACY_TIOCSTI check
 commit | commitdiff | tree
2023-12-16 Alexander PopovAdd the CONFIG_LIST_HARDENED check
 commit | commitdiff | tree
2023-12-09 Alexander PopovAdd the gather_data_sampling check
 commit | commitdiff | tree
2023-12-09 Alexander PopovAdd the CPU_SRSO check
 commit | commitdiff | tree
2023-12-09 Alexander PopovAdd the SPECULATION_MITIGATIONS check
 commit | commitdiff | tree
2023-12-09 Alexander PopovAdd the spec_rstack_overflow check
 commit | commitdiff | tree
2023-12-09 Alexander PopovAdd the MODULE_FORCE_LOAD check
 commit | commitdiff | tree
2023-12-02 Alexander PopovUpdate the README
 commit | commitdiff | tree
2023-12-02 Alexander PopovAdd the check for dis_ucode_ldr
 commit | commitdiff | tree
2023-12-02 Alexander PopovAdd the MICROCODE_INTEL and MICROCODE_AMD checks
 commit | commitdiff | tree
2023-12-02 Alexander PopovAdd a check for the 'kfence.sample_interval' boot parameter
 commit | commitdiff | tree
2023-12-02 Alexander PopovAdd the KFENCE_SAMPLE_INTERVAL check
 commit | commitdiff | tree
2023-12-02 Alexander PopovKeep the recommendation to disable kernel modules
 commit | commitdiff | tree
2023-12-02 Alexander PopovAdd a comment about 'kernel.modules_disabled'
 commit | commitdiff | tree
2023-10-18 Alexander PopovFix the reason for the 'kernel.yama.ptrace_scope' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd kspp-recommendations/kspp-sysctl.txt
 commit | commitdiff | tree
2023-10-17 Alexander PopovFix the reason for the nosmt check
 commit | commitdiff | tree
2023-10-17 Alexander PopovUpdate kspp-cmdline-x86-64.txt
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'dev.tty.legacy_tiocsti' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'kernel.randomize_va_space' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'fs.suid_dumpable' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovChange the reason of the COREDUMP check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'fs.protected_regular' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'fs.protected_fifos' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'fs.protected_hardlinks' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'fs.protected_symlinks' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'vm.unprivileged_userfaultfd' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'kernel.yama.ptrace_scope' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'kernel.kptr_restrict' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovImprove the slab_common.usercopy_fallback check
 commit | commitdiff | tree
2023-10-17 Alexander Popovhardened_usercopy=1 is now officially recommended by...
commit | commitdiff | tree
2023-10-16 Alexander PopovEnabling page_alloc.shuffle is now recommended by KSPP
 commit | commitdiff | tree
2023-10-16 Alexander Popov'mitigations=auto,nosmt' is now recommended by KSPP
 commit | commitdiff | tree
2023-10-16 Alexander PopovDisabling X86_VSYSCALL_EMULATION is now recommended...
commit | commitdiff | tree
2023-10-04 Alexander PopovDrop ZERO_CALL_USED_REGS in favour of backward-edge CFI
 commit | commitdiff | tree
2023-09-18 Alexander PopovUpdate the README
 commit | commitdiff | tree
2023-09-18 Alexander PopovRefactor the assertion in colorize_result() to improve...
commit | commitdiff | tree
2023-09-17 Alexander PopovUpdate the backup in issues.md
 commit | commitdiff | tree
2023-09-17 Alexander PopovRenaming fixes
 commit | commitdiff | tree
2023-09-17 Alexander PopovDrop default.nix (it contains a wrong utility name...
commit | commitdiff | tree
2023-09-17 Alexander Popovkconfig-hardened-check -> kernel-hardening-checker
 commit | commitdiff | tree
2023-09-17 Alexander Popovtest_engine: add test_complex_nested()
 commit | commitdiff | tree
2023-09-17 Alexander Popovtest_engine: improve the output
 commit | commitdiff | tree
2023-09-16 Alexander Popovtest_engine: improve the test_stdout()
 commit | commitdiff | tree
2023-09-16 Alexander Popovtest_engine: refactor test_complex_or() and test_complex_and()
 commit | commitdiff | tree
2023-09-13 Alexander PopovDon't remove ANSI colors, adapt the testcases instead
 commit | commitdiff | tree
2023-09-03 Alexander PopovFix arch conditions for some CmdlineChecks
 commit | commitdiff | tree
2023-08-28 Alexander PopovMake the functional tests more informative
 commit | commitdiff | tree
2023-08-28 Alexander PopovTest more wrong combinations of options
 commit | commitdiff | tree
2023-08-28 Alexander PopovTest checking sysctl separately
 commit | commitdiff | tree
2023-08-27 Alexander PopovSupport separate sysctl checking (without kconfig)
 commit | commitdiff | tree
2023-08-14 Alexander PopovImprove coverage of the functional test a bit
 commit | commitdiff | tree
2023-08-14 Alexander PopovClean .gitignore
 commit | commitdiff | tree
2023-08-14 Alexander PopovShow git information in the functional test
 commit | commitdiff | tree
2023-08-14 Alexander PopovTest an invalid sysctl file
 commit | commitdiff | tree
2023-08-14 Alexander PopovTest an unexpected line in the sysctl file
 commit | commitdiff | tree
2023-08-14 Alexander PopovTest an unexpected line in the Kconfig file
 commit | commitdiff | tree
2023-08-14 Alexander PopovDrop `if __name__ == "__main__"` from ./bin/kconfig...
commit | commitdiff | tree
2023-08-14 Alexander PopovTurn the warning about unexpected line in Kconfig file...
commit | commitdiff | tree
2023-08-14 Alexander PopovUpdate the README (add the --sysctl mode)
 commit | commitdiff | tree
2023-08-13 Alexander PopovAdd the Kconfig file of Fedora 38
 commit | commitdiff | tree
2023-08-13 Alexander PopovUse example_sysctls.txt in the functional test
 commit | commitdiff | tree
2023-08-13 Alexander PopovAdd an example sysctl output file
 commit | commitdiff | tree
2023-08-13 Alexander PopovAdd the / symbol to the sysctl parsing pattern
 commit | commitdiff | tree
2023-08-13 Alexander PopovAdd --sysctl to functional testing
 commit | commitdiff | tree
2023-08-13 Alexander PopovImprove checking the combinations of flags in the functional...
commit | commitdiff | tree
2023-08-13 Alexander PopovFix syntax to run on the Woodpecker 1.0.0 CI (part II)
 commit | commitdiff | tree
2023-08-13 Alexander PopovFix syntax to run on the Woodpecker 1.0.0 CI
 commit | commitdiff | tree
2023-08-13 Alexander PopovReport that --print and --generate can't be used together
 commit | commitdiff | tree
2023-08-13 Alexander PopovEnable sysctl checking
 commit | commitdiff | tree
2023-07-23 Alexander PopovCheck the kernel.unprivileged_bpf_disabled sysctl
 commit | commitdiff | tree
2023-07-23 Alexander PopovCheck the dev.tty.ldisc_autoload sysctl
 commit | commitdiff | tree
2023-07-23 Alexander PopovCheck the user.max_user_namespaces sysctl
 commit | commitdiff | tree
2023-07-23 Alexander PopovCheck the kernel.kexec_load_disabled sysctl
 commit | commitdiff | tree
2023-07-23 Alexander PopovCheck the kernel.perf_event_paranoid sysctl
 commit | commitdiff | tree
2023-07-23 Alexander PopovCheck the kernel.dmesg_restrict sysctl
 commit | commitdiff | tree
2023-07-23 Alexander PopovCheck the net.core.bpf_jit_harden sysctl
 commit | commitdiff | tree
2023-07-23 Alexander Popovtest_engine: use SysctlCheck in test_value_overriding()
 commit | commitdiff | tree
2023-07-23 Alexander Popovtest_engine: use SysctlCheck in test_stdout()
 commit | commitdiff | tree
2023-07-23 Alexander Popovtest_engine: implement test_simple_sysctl()
 commit | commitdiff | tree
2023-07-23 Alexander Popovtest_engine: support SysctlCheck
 commit | commitdiff | tree
next
kconfig-hardened-check