projects / kconfig-hardened-check.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
Update the self-protection checks adopted by KSPP (part I)
2022-10-13 Alexander PopovUpdate the self-protection checks adopted by KSPP ...
commit | commitdiff | tree
2022-10-13 Alexander PopovUpdate the HW_RANDOM_TPM check
 commit | commitdiff | tree
2022-10-13 Alexander PopovUpdate the UBSAN checks according to the KSPP recommendations
 commit | commitdiff | tree
2022-10-13 Alexander PopovUpdate the security policy checks adopted by KSPP
 commit | commitdiff | tree
2022-10-13 Alexander PopovUpdate the KSPP recommendations
 commit | commitdiff | tree
2022-10-12 Alexander PopovImprove the README
 commit | commitdiff | tree
2022-10-09 Alexander PopovUpdate the README
 commit | commitdiff | tree
2022-10-09 Alexander PopovDrop some of my security policy recommendations
 commit | commitdiff | tree
2022-10-09 Alexander PopovCheck SECURITY_SELINUX_DEVELOP (recommended by Clip OS)
 commit | commitdiff | tree
2022-10-09 Alexander PopovCheck SECURITY_SELINUX_BOOTPARAM (recommended by Clip OS)
 commit | commitdiff | tree
2022-10-09 Alexander PopovImprove the HW_RANDOM_TPM check
 commit | commitdiff | tree
2022-10-09 Alexander PopovCheck COREDUMP (recommended by Clip OS)
 commit | commitdiff | tree
2022-10-09 Alexander PopovCheck CONFIG_HW_RANDOM_TPM (recommended by Clip OS)
 commit | commitdiff | tree
2022-10-09 Alexander PopovCheck X86_MCE, X86_MCE_INTEL, X86_MCE_AMD (recommended...
commit | commitdiff | tree
2022-10-09 Alexander PopovImprove the README
 commit | commitdiff | tree
2022-10-07 Alexander PopovUpdate the README
 commit | commitdiff | tree
2022-10-02 Alexander PopovAlso check 'nospectre_v2' with 'spectre_v2'
 commit | commitdiff | tree
2022-10-02 Alexander PopovChange the reason for the 'nopti' check
 commit | commitdiff | tree
2022-10-02 Alexander PopovChange the reason for the 'nokaslr' check
 commit | commitdiff | tree
2022-10-02 Alexander PopovAdd the 'spectre_v2' check
 commit | commitdiff | tree
2022-10-02 Alexander PopovAdd the 'nospectre_v2' check
 commit | commitdiff | tree
2022-10-02 Alexander PopovChange the reason for the 'nosmep' and 'nosmap' checks
 commit | commitdiff | tree
2022-10-02 Alexander PopovAdd the 'nospectre_v1' check
 commit | commitdiff | tree
2022-10-02 Alexander PopovAdd the 'nopti' check
 commit | commitdiff | tree
2022-09-24 Alexander PopovAdd the comments: CC_IS_GCC and CC_IS_CLANG exist since...
commit | commitdiff | tree
2022-09-24 Alexander PopovAdd the UBSAN_LOCAL_BOUNDS check for Clang build
 commit | commitdiff | tree
2022-09-18 Alexander PopovUpdate the links to AOSP and GKI
 commit | commitdiff | tree
2022-09-02 Alexander PopovUpdate the README
 commit | commitdiff | tree
2022-09-02 Alexander PopovDetect the compiler used for the kernel compilation
 commit | commitdiff | tree
2022-09-02 Alexander PopovDon't use CONFIG_CC_IS_GCC in the checks (it was introduced...
commit | commitdiff | tree
2022-09-02 Alexander PopovMove get-nix-kconfig.py to kconfig_hardened_check/config_fil...
commit | commitdiff | tree
2022-09-02 Alexander PopovFix the X86_SMAP check: it is enabled by default since...
commit | commitdiff | tree
2022-09-02 Alexander PopovCheck the nosmap and nosmep cmdline parameters
 commit | commitdiff | tree
2022-09-02 Alexander PopovAdapt the RANDSTRUCT checks to the changes in Linux...
commit | commitdiff | tree
2022-09-02 Alexander PopovFix the comment: SHADOW_CALL_STACK is now available...
commit | commitdiff | tree
2022-09-02 Alexander PopovAdd the SECURITY_LANDLOCK recommendation by KSPP
 commit | commitdiff | tree
2022-08-23 Alexander PopovCheck the nokaslr cmdline parameter
 commit | commitdiff | tree
2022-08-20 Alexander PopovRequire GCC for the GCC plugins (part II)
 commit | commitdiff | tree
2022-08-20 Alexander PopovRequire GCC for the GCC plugins
 commit | commitdiff | tree
2022-08-20 Alexander PopovIntroduce cc_is_gcc and cc_is_clang
 commit | commitdiff | tree
2022-08-20 Alexander PopovNo, the 'page_alloc.shuffle' should be set anyway
 commit | commitdiff | tree
2022-08-20 Alexander PopovDrop the comment about slub_debug=FZ
 commit | commitdiff | tree
2022-08-17 Alexander PopovAdd the debugfs check
 commit | commitdiff | tree
2022-08-17 Alexander PopovImprove the comments
 commit | commitdiff | tree
2022-08-17 Alexander PopovAdd the 'page_alloc.shuffle' check
 commit | commitdiff | tree
2022-08-14 Alexander PopovAdd more values for the normalization
 commit | commitdiff | tree
2022-08-14 Alexander PopovImplement the normalization of cmdline options
 commit | commitdiff | tree
2022-08-14 Alexander PopovDescribe the meaning of the checks
 commit | commitdiff | tree
2022-08-13 Alexander PopovCheck the 'rodata' cmdline parameter on the arches...
commit | commitdiff | tree
2022-08-13 Alexander PopovCheck hardened_usercopy in the cmdline
 commit | commitdiff | tree
2022-08-13 Alexander PopovAdd the comment about vm.mmap_min_addr sysctl (for...
commit | commitdiff | tree
2022-08-13 Alexander PopovSECURITY_DMESG_RESTRICT is more about cutting attack...
commit | commitdiff | tree
2022-07-21 Alexander PopovImprove the slab_common.usercopy_fallback check
 commit | commitdiff | tree
2022-07-21 Alexander PopovAdd the slab_common.usercopy_fallback check
 commit | commitdiff | tree
2022-07-21 Alexander PopovImprove the STACKPROTECTOR check
 commit | commitdiff | tree
2022-07-21 Alexander PopovDon't mention LKDTM
 commit | commitdiff | tree
2022-07-17 Alexander PopovAdd info about the LKDDb project by @cateee
 commit | commitdiff | tree
2022-07-17 Alexander PopovCheck ARM64_BTI for userspace hardening
 commit | commitdiff | tree
2022-07-17 Alexander PopovCheck ARM64_PTR_AUTH for userspace hardening
 commit | commitdiff | tree
2022-07-17 Alexander PopovAdd rodata check for ARM64
 commit | commitdiff | tree
2022-07-11 Alexander PopovAdd iommu.passthrough check
 commit | commitdiff | tree
2022-07-11 Alexander PopovAdd IOMMU_DEFAULT_PASSTHROUGH check
 commit | commitdiff | tree
2022-07-11 Alexander PopovAdd iommu.strict check
 commit | commitdiff | tree
2022-07-11 Alexander PopovAdd vsyscall check
 commit | commitdiff | tree
2022-07-09 Alexander PopovDon't add CmdlineChecks in add_kconfig_checks() to...
commit | commitdiff | tree
2022-07-09 Alexander PopovAdd slub_debug check
 commit | commitdiff | tree
2022-07-08 Alexander PopovAdd the release badge
 commit | commitdiff | tree
2022-06-20 Alexander PopovAdd the init_on_free check
 commit | commitdiff | tree
2022-06-20 Alexander PopovAdd the page_poison check required for PAGE_POISONING_ZERO
 commit | commitdiff | tree
2022-06-20 Alexander PopovRewrite the slab_nomerge check
 commit | commitdiff | tree
2022-06-20 Alexander PopovRewrite the randomize_kstack_offset check
 commit | commitdiff | tree
2022-06-19 Alexander PopovCheck that a kconfig option value is sane
 commit | commitdiff | tree
2022-06-19 Alexander PopovAdd a tricky check for init_on_alloc and INIT_ON_ALLOC_DEFAU...
commit | commitdiff | tree
2022-06-19 Alexander PopovMove the add_cmdline_checks() call earlier
 commit | commitdiff | tree
2022-06-08 Alexander PopovDon't check __name__ in __init__.py (it can't run separately...
commit | commitdiff | tree
2022-06-08 Alexander PopovFix the pylint warning about isinstance
 commit | commitdiff | tree
2022-06-08 Alexander PopovDrop unneeded properties of ComplexOptCheck
 commit | commitdiff | tree
2022-06-08 Alexander PopovTurn some error conditions into assertions (part 4)
 commit | commitdiff | tree
2022-06-08 Alexander PopovTurn some error conditions into assertions (part 3)
 commit | commitdiff | tree
2022-06-08 Alexander PopovTurn some error conditions into assertions (part 2)
 commit | commitdiff | tree
2022-06-08 Alexander PopovTurn some error conditions into assertions (part 1)
 commit | commitdiff | tree
2022-06-08 Alexander PopovDrop useless checks, the ComplexOptCheck constructor...
commit | commitdiff | tree
2022-06-08 Alexander Popovgithub actions: Test error handling (part 2)
 commit | commitdiff | tree
2022-06-08 Alexander Popovgithub actions: Test error handling (part 1)
 commit | commitdiff | tree
2022-05-30 Alexander Popovgithub actions: Collect coverage for error handling...
commit | commitdiff | tree
2022-05-30 Alexander Popovgithub actions: upgrade to codecov-action@v2
 commit | commitdiff | tree
2022-05-30 Alexander PopovCheck that --config and --print are not used together
 commit | commitdiff | tree
2022-05-30 Alexander Popovgithub actions: Collect coverage for cmdline checking
 commit | commitdiff | tree
2022-05-30 Alexander Popovgithub actions: Improve the descriptions
 commit | commitdiff | tree
2022-05-30 Alexander Popovgithub actions: Improve the test output
 commit | commitdiff | tree
2022-05-30 Alexander PopovDrop dash-separated values from setup.cfg
 commit | commitdiff | tree
2022-05-30 Alexander Popovgithub actions: Add testing with python 3.9
 commit | commitdiff | tree
2022-05-28 Alexander PopovMerge branch 'cmdline'
 commit | commitdiff | tree
2022-05-28 Alexander PopovChange the example output in README
 commit | commitdiff | tree
2022-05-28 Alexander PopovDescribe the cmdline checking support in README
 commit | commitdiff | tree
2022-05-28 Alexander PopovAdd the example config of Fedora 34
 commit | commitdiff | tree
2022-05-28 Alexander PopovCheck the pti cmdline parameter
 commit | commitdiff | tree
2022-05-28 Alexander PopovCheck the slab_nomerge cmdline parameter
 commit | commitdiff | tree
2022-05-28 Alexander PopovCheck the randomize_kstack_offset cmdline parameter
 commit | commitdiff | tree
2022-05-28 Alexander PopovAdd cmdline file parsing
 commit | commitdiff | tree
next
kconfig-hardened-check