From: Alexander Popov Date: Mon, 16 Oct 2023 20:22:59 +0000 (+0300) Subject: 'mitigations=auto,nosmt' is now recommended by KSPP X-Git-Tag: v0.6.6~67 X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=83ae91cf9781cdc69fe272444af177f1ae4bc1b5;p=kconfig-hardened-check.git 'mitigations=auto,nosmt' is now recommended by KSPP --- diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py index 4bebb8c..f1530f5 100644 --- a/kernel_hardening_checker/checks.py +++ b/kernel_hardening_checker/checks.py @@ -457,8 +457,8 @@ def add_cmdline_checks(l, arch): CmdlineCheck('self_protection', 'defconfig', 'rodata', 'is not set'))] # 'self_protection', 'kspp' - l += [CmdlineCheck('self_protection', 'kspp', 'nosmt', 'is present')] - l += [CmdlineCheck('self_protection', 'kspp', 'mitigations', 'auto,nosmt')] # 'nosmt' by kspp + 'auto' by defconfig + l += [CmdlineCheck('self_protection', 'kspp', 'mitigations', 'auto,nosmt')] + l += [CmdlineCheck('self_protection', 'kspp', 'nosmt', 'is present')] # slow (high performance penalty) l += [CmdlineCheck('self_protection', 'kspp', 'slab_merge', 'is not set')] # consequence of 'slab_nomerge' by kspp l += [CmdlineCheck('self_protection', 'kspp', 'slub_merge', 'is not set')] # consequence of 'slab_nomerge' by kspp l += [OR(CmdlineCheck('self_protection', 'kspp', 'slab_nomerge', 'is present'),