jxself.org public git repositories - kconfig-hardened-check.git/history

projects / kconfig-hardened-check.git / history

[kconfig-hardened-check.git] / kconfig_hardened_check / __init__.py

2022-10-13	Alexander Popov	Update the self-protection checks adopted by KSPP ...	blob \| commitdiff \| raw
2022-10-13	Alexander Popov	Update the HW_RANDOM_TPM check	blob \| commitdiff \| raw \| diff to current
2022-10-13	Alexander Popov	Update the UBSAN checks according to the KSPP recommend...	blob \| commitdiff \| raw \| diff to current
2022-10-13	Alexander Popov	Update the security policy checks adopted by KSPP	blob \| commitdiff \| raw \| diff to current
2022-10-09	Alexander Popov	Drop some of my security policy recommendations	blob \| commitdiff \| raw \| diff to current
2022-10-09	Alexander Popov	Check SECURITY_SELINUX_DEVELOP (recommended by Clip OS)	blob \| commitdiff \| raw \| diff to current
2022-10-09	Alexander Popov	Check SECURITY_SELINUX_BOOTPARAM (recommended by Clip OS)	blob \| commitdiff \| raw \| diff to current
2022-10-09	Alexander Popov	Improve the HW_RANDOM_TPM check	blob \| commitdiff \| raw \| diff to current
2022-10-09	Alexander Popov	Check COREDUMP (recommended by Clip OS)	blob \| commitdiff \| raw \| diff to current
2022-10-09	Alexander Popov	Check CONFIG_HW_RANDOM_TPM (recommended by Clip OS)	blob \| commitdiff \| raw \| diff to current
2022-10-09	Alexander Popov	Check X86_MCE, X86_MCE_INTEL, X86_MCE_AMD (recommended...	blob \| commitdiff \| raw \| diff to current
2022-10-02	Alexander Popov	Also check 'nospectre_v2' with 'spectre_v2'	blob \| commitdiff \| raw \| diff to current
2022-10-02	Alexander Popov	Change the reason for the 'nopti' check	blob \| commitdiff \| raw \| diff to current
2022-10-02	Alexander Popov	Change the reason for the 'nokaslr' check	blob \| commitdiff \| raw \| diff to current
2022-10-02	Alexander Popov	Add the 'spectre_v2' check	blob \| commitdiff \| raw \| diff to current
2022-10-02	Alexander Popov	Add the 'nospectre_v2' check	blob \| commitdiff \| raw \| diff to current
2022-10-02	Alexander Popov	Change the reason for the 'nosmep' and 'nosmap' checks	blob \| commitdiff \| raw \| diff to current
2022-10-02	Alexander Popov	Add the 'nospectre_v1' check	blob \| commitdiff \| raw \| diff to current
2022-10-02	Alexander Popov	Add the 'nopti' check	blob \| commitdiff \| raw \| diff to current
2022-09-24	Alexander Popov	Add the comments: CC_IS_GCC and CC_IS_CLANG exist since...	blob \| commitdiff \| raw \| diff to current
2022-09-24	Alexander Popov	Add the UBSAN_LOCAL_BOUNDS check for Clang build	blob \| commitdiff \| raw \| diff to current
2022-09-02	Alexander Popov	Detect the compiler used for the kernel compilation	blob \| commitdiff \| raw \| diff to current
2022-09-02	Alexander Popov	Don't use CONFIG_CC_IS_GCC in the checks (it was introd...	blob \| commitdiff \| raw \| diff to current
2022-09-02	Alexander Popov	Fix the X86_SMAP check: it is enabled by default since...	blob \| commitdiff \| raw \| diff to current
2022-09-02	Alexander Popov	Check the nosmap and nosmep cmdline parameters	blob \| commitdiff \| raw \| diff to current
2022-09-02	Alexander Popov	Adapt the RANDSTRUCT checks to the changes in Linux...	blob \| commitdiff \| raw \| diff to current
2022-09-02	Alexander Popov	Fix the comment: SHADOW_CALL_STACK is now available...	blob \| commitdiff \| raw \| diff to current
2022-09-02	Alexander Popov	Add the SECURITY_LANDLOCK recommendation by KSPP	blob \| commitdiff \| raw \| diff to current
2022-08-23	Alexander Popov	Check the nokaslr cmdline parameter	blob \| commitdiff \| raw \| diff to current
2022-08-20	Alexander Popov	Require GCC for the GCC plugins (part II)	blob \| commitdiff \| raw \| diff to current
2022-08-20	Alexander Popov	Require GCC for the GCC plugins	blob \| commitdiff \| raw \| diff to current
2022-08-20	Alexander Popov	Introduce cc_is_gcc and cc_is_clang	blob \| commitdiff \| raw \| diff to current
2022-08-20	Alexander Popov	No, the 'page_alloc.shuffle' should be set anyway	blob \| commitdiff \| raw \| diff to current
2022-08-20	Alexander Popov	Drop the comment about slub_debug=FZ	blob \| commitdiff \| raw \| diff to current
2022-08-17	Alexander Popov	Add the debugfs check	blob \| commitdiff \| raw \| diff to current
2022-08-17	Alexander Popov	Improve the comments	blob \| commitdiff \| raw \| diff to current
2022-08-17	Alexander Popov	Add the 'page_alloc.shuffle' check	blob \| commitdiff \| raw \| diff to current
2022-08-14	Alexander Popov	Add more values for the normalization	blob \| commitdiff \| raw \| diff to current
2022-08-14	Alexander Popov	Implement the normalization of cmdline options	blob \| commitdiff \| raw \| diff to current
2022-08-14	Alexander Popov	Describe the meaning of the checks	blob \| commitdiff \| raw \| diff to current
2022-08-13	Alexander Popov	Check the 'rodata' cmdline parameter on the arches...	blob \| commitdiff \| raw \| diff to current
2022-08-13	Alexander Popov	Check hardened_usercopy in the cmdline	blob \| commitdiff \| raw \| diff to current
2022-08-13	Alexander Popov	Add the comment about vm.mmap_min_addr sysctl (for...	blob \| commitdiff \| raw \| diff to current
2022-08-13	Alexander Popov	SECURITY_DMESG_RESTRICT is more about cutting attack...	blob \| commitdiff \| raw \| diff to current
2022-07-21	Alexander Popov	Improve the slab_common.usercopy_fallback check	blob \| commitdiff \| raw \| diff to current
2022-07-21	Alexander Popov	Add the slab_common.usercopy_fallback check	blob \| commitdiff \| raw \| diff to current
2022-07-21	Alexander Popov	Improve the STACKPROTECTOR check	blob \| commitdiff \| raw \| diff to current
2022-07-21	Alexander Popov	Don't mention LKDTM	blob \| commitdiff \| raw \| diff to current
2022-07-17	Alexander Popov	Check ARM64_BTI for userspace hardening	blob \| commitdiff \| raw \| diff to current
2022-07-17	Alexander Popov	Check ARM64_PTR_AUTH for userspace hardening	blob \| commitdiff \| raw \| diff to current
2022-07-17	Alexander Popov	Add rodata check for ARM64	blob \| commitdiff \| raw \| diff to current
2022-07-11	Alexander Popov	Add iommu.passthrough check	blob \| commitdiff \| raw \| diff to current
2022-07-11	Alexander Popov	Add IOMMU_DEFAULT_PASSTHROUGH check	blob \| commitdiff \| raw \| diff to current
2022-07-11	Alexander Popov	Add iommu.strict check	blob \| commitdiff \| raw \| diff to current
2022-07-11	Alexander Popov	Add vsyscall check	blob \| commitdiff \| raw \| diff to current
2022-07-09	Alexander Popov	Don't add CmdlineChecks in add_kconfig_checks() to...	blob \| commitdiff \| raw \| diff to current
2022-07-09	Alexander Popov	Add slub_debug check	blob \| commitdiff \| raw \| diff to current
2022-06-20	Alexander Popov	Add the init_on_free check	blob \| commitdiff \| raw \| diff to current
2022-06-20	Alexander Popov	Add the page_poison check required for PAGE_POISONING_ZERO	blob \| commitdiff \| raw \| diff to current
2022-06-20	Alexander Popov	Rewrite the slab_nomerge check	blob \| commitdiff \| raw \| diff to current
2022-06-20	Alexander Popov	Rewrite the randomize_kstack_offset check	blob \| commitdiff \| raw \| diff to current
2022-06-19	Alexander Popov	Check that a kconfig option value is sane	blob \| commitdiff \| raw \| diff to current
2022-06-19	Alexander Popov	Add a tricky check for init_on_alloc and INIT_ON_ALLOC_...	blob \| commitdiff \| raw \| diff to current
2022-06-19	Alexander Popov	Move the add_cmdline_checks() call earlier	blob \| commitdiff \| raw \| diff to current
2022-06-08	Alexander Popov	Don't check __name__ in __init__.py (it can't run separ...	blob \| commitdiff \| raw \| diff to current
2022-06-08	Alexander Popov	Fix the pylint warning about isinstance	blob \| commitdiff \| raw \| diff to current
2022-06-08	Alexander Popov	Drop unneeded properties of ComplexOptCheck	blob \| commitdiff \| raw \| diff to current
2022-06-08	Alexander Popov	Turn some error conditions into assertions (part 4)	blob \| commitdiff \| raw \| diff to current
2022-06-08	Alexander Popov	Turn some error conditions into assertions (part 3)	blob \| commitdiff \| raw \| diff to current
2022-06-08	Alexander Popov	Turn some error conditions into assertions (part 2)	blob \| commitdiff \| raw \| diff to current
2022-06-08	Alexander Popov	Turn some error conditions into assertions (part 1)	blob \| commitdiff \| raw \| diff to current
2022-06-08	Alexander Popov	Drop useless checks, the ComplexOptCheck constructor...	blob \| commitdiff \| raw \| diff to current
2022-05-30	Alexander Popov	Check that --config and --print are not used together	blob \| commitdiff \| raw \| diff to current
2022-05-28	Alexander Popov	Merge branch 'cmdline'	blob \| commitdiff \| raw \| diff to current
2022-05-28	Alexander Popov	Check the pti cmdline parameter	blob \| commitdiff \| raw \| diff to current
2022-05-28	Alexander Popov	Check the slab_nomerge cmdline parameter	blob \| commitdiff \| raw \| diff to current
2022-05-28	Alexander Popov	Check the randomize_kstack_offset cmdline parameter	blob \| commitdiff \| raw \| diff to current
2022-05-28	Alexander Popov	Add cmdline file parsing	blob \| commitdiff \| raw \| diff to current
2022-05-28	Alexander Popov	Add the infrastructure for cmdline checks	blob \| commitdiff \| raw \| diff to current
2022-05-28	Alexander Popov	Add '--cmdline' argument for the tool	blob \| commitdiff \| raw \| diff to current
2022-05-28	Alexander Popov	Add cmdline checks to '--print'	blob \| commitdiff \| raw \| diff to current
2022-05-28	Alexander Popov	Add the CmdlineCheck class	blob \| commitdiff \| raw \| diff to current
2022-05-15	Alexander Popov	Add the comment about sysrq_always_enabled	blob \| commitdiff \| raw \| diff to current
2022-05-15	Alexander Popov	Add the comment about rodata	blob \| commitdiff \| raw \| diff to current
2022-05-06	Alexander Popov	Add the comment about arm64.nomte	blob \| commitdiff \| raw \| diff to current
2022-05-06	Alexander Popov	Add the comment about kernel.randomize_va_space	blob \| commitdiff \| raw \| diff to current
2022-05-06	Alexander Popov	Add the KGDB check	blob \| commitdiff \| raw \| diff to current
2022-05-06	Alexander Popov	Add RANDOMIZE_MODULE_REGION_FULL for arm64	blob \| commitdiff \| raw \| diff to current
2022-04-28	Alexander Popov	Merge pull request #62 from evdenis/master	blob \| commitdiff \| raw \| diff to current
2022-04-28	Alexander Popov	Add the type property for OptCheck to fix a pylint...	blob \| commitdiff \| raw \| diff to current
2022-04-27	Denis Efremov	Add BLK_DEV_FD_RAWCMD 62/head	blob \| commitdiff \| raw \| diff to current
2022-04-22	Alexander Popov	Add the STACKPROTECTOR check from KSPP	blob \| commitdiff \| raw \| diff to current
2022-04-22	Alexander Popov	Drop the ARM64_MTE check for userspace hardening	blob \| commitdiff \| raw \| diff to current
2022-04-22	Alexander Popov	Separate out checking SECURITY_WRITABLE_HOOKS and SECUR...	blob \| commitdiff \| raw \| diff to current
2022-04-22	Alexander Popov	Fix the arch condition for the SCHED_CORE check	blob \| commitdiff \| raw \| diff to current
2022-04-22	Alexander Popov	Add the KSPP recommendation of ZERO_CALL_USED_REGS	blob \| commitdiff \| raw \| diff to current
2022-04-22	Alexander Popov	Disabling X86_MSR is recommended by KSPP	blob \| commitdiff \| raw \| diff to current
2022-04-20	Alexander Popov	Fix the bug in the verdict description for ComplexOptCheck	blob \| commitdiff \| raw \| diff to current
2022-04-20	Alexander Popov	Additional check for TYPES_OF_CHECKS	blob \| commitdiff \| raw \| diff to current
2022-04-20	Alexander Popov	Drop PresenceCheck; OptCheck without 'expected' paramet...	blob \| commitdiff \| raw \| diff to current
next

kconfig-hardened-check

RSS Atom