projects / kconfig-hardened-check.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
Add the 'dev.tty.legacy_tiocsti' check
2023-10-17 Alexander PopovAdd the 'dev.tty.legacy_tiocsti' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'kernel.randomize_va_space' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'fs.suid_dumpable' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovChange the reason of the COREDUMP check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'fs.protected_regular' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'fs.protected_fifos' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'fs.protected_hardlinks' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'fs.protected_symlinks' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'vm.unprivileged_userfaultfd' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'kernel.yama.ptrace_scope' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd the 'kernel.kptr_restrict' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovImprove the slab_common.usercopy_fallback check
 commit | commitdiff | tree
2023-10-17 Alexander Popovhardened_usercopy=1 is now officially recommended by...
commit | commitdiff | tree
2023-10-16 Alexander PopovEnabling page_alloc.shuffle is now recommended by KSPP
 commit | commitdiff | tree
2023-10-16 Alexander Popov'mitigations=auto,nosmt' is now recommended by KSPP
 commit | commitdiff | tree
2023-10-16 Alexander PopovDisabling X86_VSYSCALL_EMULATION is now recommended...
commit | commitdiff | tree
2023-10-04 Alexander PopovDrop ZERO_CALL_USED_REGS in favour of backward-edge CFI
 commit | commitdiff | tree
2023-09-18 Alexander PopovUpdate the README
 commit | commitdiff | tree
2023-09-18 Alexander PopovRefactor the assertion in colorize_result() to improve...
commit | commitdiff | tree
2023-09-17 Alexander PopovUpdate the backup in issues.md
 commit | commitdiff | tree
2023-09-17 Alexander PopovRenaming fixes
 commit | commitdiff | tree
2023-09-17 Alexander PopovDrop default.nix (it contains a wrong utility name...
commit | commitdiff | tree
2023-09-17 Alexander Popovkconfig-hardened-check -> kernel-hardening-checker
 commit | commitdiff | tree
2023-09-17 Alexander Popovtest_engine: add test_complex_nested()
 commit | commitdiff | tree
2023-09-17 Alexander Popovtest_engine: improve the output
 commit | commitdiff | tree
2023-09-16 Alexander Popovtest_engine: improve the test_stdout()
 commit | commitdiff | tree
2023-09-16 Alexander Popovtest_engine: refactor test_complex_or() and test_complex_and()
 commit | commitdiff | tree
2023-09-13 Alexander PopovDon't remove ANSI colors, adapt the testcases instead
 commit | commitdiff | tree
2023-09-03 Alexander PopovFix arch conditions for some CmdlineChecks
 commit | commitdiff | tree
2023-08-28 Alexander PopovMake the functional tests more informative
 commit | commitdiff | tree
2023-08-28 Alexander PopovTest more wrong combinations of options
 commit | commitdiff | tree
2023-08-28 Alexander PopovTest checking sysctl separately
 commit | commitdiff | tree
2023-08-27 Alexander PopovSupport separate sysctl checking (without kconfig)
 commit | commitdiff | tree
2023-08-14 Alexander PopovImprove coverage of the functional test a bit
 commit | commitdiff | tree
2023-08-14 Alexander PopovClean .gitignore
 commit | commitdiff | tree
2023-08-14 Alexander PopovShow git information in the functional test
 commit | commitdiff | tree
2023-08-14 Alexander PopovTest an invalid sysctl file
 commit | commitdiff | tree
2023-08-14 Alexander PopovTest an unexpected line in the sysctl file
 commit | commitdiff | tree
2023-08-14 Alexander PopovTest an unexpected line in the Kconfig file
 commit | commitdiff | tree
2023-08-14 Alexander PopovDrop `if __name__ == "__main__"` from ./bin/kconfig...
commit | commitdiff | tree
2023-08-14 Alexander PopovTurn the warning about unexpected line in Kconfig file...
commit | commitdiff | tree
2023-08-14 Alexander PopovUpdate the README (add the --sysctl mode)
 commit | commitdiff | tree
2023-08-13 Alexander PopovAdd the Kconfig file of Fedora 38
 commit | commitdiff | tree
2023-08-13 Alexander PopovUse example_sysctls.txt in the functional test
 commit | commitdiff | tree
2023-08-13 Alexander PopovAdd an example sysctl output file
 commit | commitdiff | tree
2023-08-13 Alexander PopovAdd the / symbol to the sysctl parsing pattern
 commit | commitdiff | tree
2023-08-13 Alexander PopovAdd --sysctl to functional testing
 commit | commitdiff | tree
2023-08-13 Alexander PopovImprove checking the combinations of flags in the functional...
commit | commitdiff | tree
2023-08-13 Alexander PopovFix syntax to run on the Woodpecker 1.0.0 CI (part II)
 commit | commitdiff | tree
2023-08-13 Alexander PopovFix syntax to run on the Woodpecker 1.0.0 CI
 commit | commitdiff | tree
2023-08-13 Alexander PopovReport that --print and --generate can't be used together
 commit | commitdiff | tree
2023-08-13 Alexander PopovEnable sysctl checking
 commit | commitdiff | tree
2023-07-23 Alexander PopovCheck the kernel.unprivileged_bpf_disabled sysctl
 commit | commitdiff | tree
2023-07-23 Alexander PopovCheck the dev.tty.ldisc_autoload sysctl
 commit | commitdiff | tree
2023-07-23 Alexander PopovCheck the user.max_user_namespaces sysctl
 commit | commitdiff | tree
2023-07-23 Alexander PopovCheck the kernel.kexec_load_disabled sysctl
 commit | commitdiff | tree
2023-07-23 Alexander PopovCheck the kernel.perf_event_paranoid sysctl
 commit | commitdiff | tree
2023-07-23 Alexander PopovCheck the kernel.dmesg_restrict sysctl
 commit | commitdiff | tree
2023-07-23 Alexander PopovCheck the net.core.bpf_jit_harden sysctl
 commit | commitdiff | tree
2023-07-23 Alexander Popovtest_engine: use SysctlCheck in test_value_overriding()
 commit | commitdiff | tree
2023-07-23 Alexander Popovtest_engine: use SysctlCheck in test_stdout()
 commit | commitdiff | tree
2023-07-23 Alexander Popovtest_engine: implement test_simple_sysctl()
 commit | commitdiff | tree
2023-07-23 Alexander Popovtest_engine: support SysctlCheck
 commit | commitdiff | tree
2023-07-22 Alexander PopovRefactor populate_opt_with_data()
 commit | commitdiff | tree
2023-07-16 Alexander PopovMute warnings in the JSON mode and improve wording
 commit | commitdiff | tree
2023-07-16 Alexander PopovImplement parse_sysctl_file()
 commit | commitdiff | tree
2023-07-15 Alexander PopovDrop an obsolete error handling test
 commit | commitdiff | tree
2023-07-15 Alexander PopovFix the bug in the functional tests
 commit | commitdiff | tree
2023-07-15 Alexander PopovEmit WARNING for the cmdline options that exist multiple...
commit | commitdiff | tree
2023-07-15 Alexander PopovPrecise the Kconfig parsing
 commit | commitdiff | tree
2023-07-12 Alexander PopovGet rid of useless regular expressions in detect_compiler()
 commit | commitdiff | tree
2023-07-12 Alexander PopovPrecise the regular expressions in detect_arch() and...
commit | commitdiff | tree
2023-07-12 Alexander PopovShow error if some cmdline option exists multiple times
 commit | commitdiff | tree
2023-07-08 Alexander PopovAdd the basic infrastructure for checking sysctl
 commit | commitdiff | tree
2023-07-08 Alexander PopovIntroduce the SysctlCheck class
 commit | commitdiff | tree
2023-07-04 Alexander PopovCheck disabling XFS_SUPPORT_V4 for cutting attack surface
 commit | commitdiff | tree
2023-07-02 Alexander PopovPrint the microarchitecture in --generate mode
 commit | commitdiff | tree
2023-06-25 Alexander PopovUpdate the README
 commit | commitdiff | tree
2023-06-25 Alexander PopovAdd the info about /proc/cmdline to the usage help
 commit | commitdiff | tree
2023-06-18 Alexander Popovsetup: fix "The license_file parameter is deprecated"
 commit | commitdiff | tree
2023-06-18 Alexander Popovsetup: Don't use the automatic "find_namespace:" discovery
 commit | commitdiff | tree
2023-06-18 Alexander Popovsetup: Fix the warning "Package would be ignored"
 commit | commitdiff | tree
2023-06-18 Alexander Popovsetup: Drop obsolete zip_safe flag
 commit | commitdiff | tree
2023-06-17 Alexander PopovMove the draft of the security hardening sysctls to...
commit | commitdiff | tree
2023-06-17 Alexander PopovImprove normalize_cmdline_options()
 commit | commitdiff | tree
2023-06-12 Alexander PopovGitHub Actions: decrease the max-parallel to 1 to avoid...
commit | commitdiff | tree
2023-06-12 Alexander PopovAdd functional tests for --generate
 commit | commitdiff | tree
2023-06-12 Alexander PopovUpdate the README
 commit | commitdiff | tree
2023-06-12 Alexander PopovAdd a new feature --generate
 commit | commitdiff | tree
2023-06-12 Alexander PopovRefactoring of the argument parsing
 commit | commitdiff | tree
2023-06-12 Alexander PopovImprove the comments and README (part II)
 commit | commitdiff | tree
2023-06-12 Alexander PopovSkip normalize_cmdline_options() for the vdso32 and...
commit | commitdiff | tree
2023-06-12 Alexander PopovSkip normalize_cmdline_options() for the vsyscall cmdline...
commit | commitdiff | tree
2023-06-12 Alexander PopovSkip normalize_cmdline_options() for the iommu cmdline...
commit | commitdiff | tree
2023-06-12 Alexander PopovSkip normalize_cmdline_options() for the slub_debug...
commit | commitdiff | tree
2023-06-12 Alexander PopovImprove the comments and README
 commit | commitdiff | tree
2023-06-05 Alexander PopovSkip normalize_cmdline_options() for the rodata cmdline...
commit | commitdiff | tree
2023-06-05 Alexander PopovSkip normalize_cmdline_options() for the ssbd cmdline...
commit | commitdiff | tree
2023-05-28 Alexander PopovAdd a comment about cfi boot parameter
 commit | commitdiff | tree
2023-05-28 Alexander PopovAdd the X86_KERNEL_IBT check
 commit | commitdiff | tree
next
kconfig-hardened-check