projects / kconfig-hardened-check.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
Fix the reason and decision of the BPF_JIT check
2024-05-02 Alexander PopovFix the reason and decision of the BPF_JIT check
 commit | commitdiff | tree
2024-05-02 Alexander PopovRestore the `dev.tty.legacy_tiocsti` check
 commit | commitdiff | tree
2024-05-02 Alexander PopovUse CONFIG_LOCALVERSION instead of CONFIG_DEFAULT_INIT...
commit | commitdiff | tree
2024-05-02 Eneas U de Queirozskip kernel.modules_disabled if MODULES not set
 commit | commitdiff | tree
2024-05-02 Eneas U de QueirozSkip unprivileged_userfaultfd if USERFAULTFD unset
 commit | commitdiff | tree
2024-05-02 Eneas U de QueirozDon't fail if dev.tty.legacy_tiocsti not found
 commit | commitdiff | tree
2024-05-02 Eneas U de QueirozSkip unprivileged_bpf_disabled if BPF_SYSCALL not set
 commit | commitdiff | tree
2024-05-02 Eneas U de QueirozSkip kexec_load_disabled if KEXEC_CORE is not set
 commit | commitdiff | tree
2024-05-02 Eneas U de QueirozSkip bpf_jit_harden sysctl if BPF_JIT is not set
 commit | commitdiff | tree
2024-04-30 Alexander PopovMerge branch 'cpu_depend'
 commit | commitdiff | tree
2024-04-30 Alexander PopovFix the reason and decision for CPU_SUP_INTEL
 commit | commitdiff | tree
2024-04-30 Alexander PopovStyle fixes
 commit | commitdiff | tree
2024-04-21 Alexander PopovLike grep, colorize the output only if stdout is connected...
commit | commitdiff | tree
2024-04-21 Alexander PopovDon't use the `type` name for the class methods
 commit | commitdiff | tree
2024-04-18 Alexander PopovAdd the BLK_DEV_WRITE_MOUNTED/bdev_allow_write_mounted...
commit | commitdiff | tree
2024-04-17 Alexander PopovCI: codecov-action@v3.1.5 with token doesn't work well...
commit | commitdiff | tree
2024-04-17 Alexander PopovCI: Return to codecov-action@v3.1.5, but with tokens
 commit | commitdiff | tree
2024-04-17 Alexander PopovCI: Update python versions
 commit | commitdiff | tree
2024-04-17 Alexander PopovAdd the links to the corresponding codecov pages in...
commit | commitdiff | tree
2024-04-17 Alexander PopovCI: Move to codecov-action@4
 commit | commitdiff | tree
2024-04-17 Alexander PopovCI: Move to codecov-action@v3.1.5
 commit | commitdiff | tree
2024-04-17 Alexander PopovMerge branch 'shstk'
 commit | commitdiff | tree
2024-04-17 Alexander PopovFix 'decision' for the X86_USER_SHADOW_STACK check
 commit | commitdiff | tree
2024-03-30 Alexander PopovAdd a comment that 'user.max_user_namespaces=0' may...
commit | commitdiff | tree
2024-03-25 Alexander PopovUpdate the README
 commit | commitdiff | tree
2024-03-25 Alexander PopovImprove the CONFIG_CFI_CLANG checks (add the CONFIG_CC_IS_CL...
commit | commitdiff | tree
2024-03-25 Alexander PopovDrop the GCC_PLUGINS check (checking CC_IS_GCC is enough)
 commit | commitdiff | tree
2024-03-25 Alexander PopovAdd the CONFIG_CC_IS_GCC dependency for gcc plugins
 commit | commitdiff | tree
2024-03-25 Alexander PopovDon't require GCC_PLUGINS separately
 commit | commitdiff | tree
2024-03-24 Alexander PopovRename the 'my' check decision to 'a13xp0p0v'
 commit | commitdiff | tree
2024-03-17 Alexander PopovMake the table column names and JSON field names fit...
commit | commitdiff | tree
2024-03-17 Alexander PopovMerge remote-tracking branch 'krishjainx/improve-json...
commit | commitdiff | tree
2024-03-11 Alexander PopovImprove the DEBUG_CREDENTIALS check
 commit | commitdiff | tree
2024-03-10 Alexander PopovFix the false result of the REFCOUNT_FULL check for...
commit | commitdiff | tree
2024-03-09 Alexander PopovHave to revert codecov back to v3
 commit | commitdiff | tree
2024-03-09 Alexander PopovUpdate codecov-action
 commit | commitdiff | tree
2024-03-09 Alexander PopovAdapt test_version() in the unittest
 commit | commitdiff | tree
2024-03-09 Alexander PopovCheck all 3 numbers of the kernel version in VersionCheck
 commit | commitdiff | tree
2024-03-09 Alexander PopovFix the fresh set_state() bug found by unittest
 commit | commitdiff | tree
2024-03-09 Alexander PopovMake `python -m unittest` show the whole output
 commit | commitdiff | tree
2024-03-09 Alexander PopovUpdate github actions
 commit | commitdiff | tree
2024-03-09 Alexander PopovImplement the set_state() method of the check classes
 commit | commitdiff | tree
2024-03-09 Alexander PopovUse 3 numbers in the VersionCheck constructor
 commit | commitdiff | tree
2024-03-09 Alexander PopovParse all numbers of the kernel version
 commit | commitdiff | tree
2024-03-09 Alexander PopovSkip the kernel version part after '-'
 commit | commitdiff | tree
2024-03-04 Alexander PopovAdd the ia32_emulation check
 commit | commitdiff | tree
2024-02-19 Alexander PopovAdd MODULE_SIG_SHA3_512 as a valid option
 commit | commitdiff | tree
2024-02-17 Alexander PopovMake LOCKDOWN_LSM 'self_protection', not 'security_policy'
 commit | commitdiff | tree
2024-01-16 Alexander PopovReady for the release 0.6.6
 commit | commitdiff | tree
2024-01-16 Alexander PopovUpdate issues.md
 commit | commitdiff | tree
2024-01-16 Alexander PopovUpdate the README
 commit | commitdiff | tree
2024-01-16 Alexander PopovUpdate the Ubuntu example configs
 commit | commitdiff | tree
2024-01-16 Alexander PopovDon't print the warning about ARCH_MMAP_RND_BITS in...
commit | commitdiff | tree
2024-01-16 Alexander PopovImprove the check of DEBUG_NOTIFIERS feature (part 2)
 commit | commitdiff | tree
2024-01-16 Alexander PopovImprove the check of DEBUG_NOTIFIERS feature
 commit | commitdiff | tree
2024-01-16 Alexander PopovImprove the check of SCHED_STACK_END_CHECK.
 commit | commitdiff | tree
2024-01-16 Alexander PopovFix style (III)
 commit | commitdiff | tree
2024-01-16 Alexander PopovFix style (II)
 commit | commitdiff | tree
2024-01-16 Alexander PopovFix style (I)
 commit | commitdiff | tree
2024-01-16 Alexander PopovDisable pylint too-many-locals, it's not useful for...
commit | commitdiff | tree
2024-01-16 Alexander PopovFix pylint W0613: Unused argument 'arch'
 commit | commitdiff | tree
2024-01-16 Alexander PopovFix pylint E1101: Instance of 'OptCheck' has no 'type...
commit | commitdiff | tree
2024-01-16 Alexander PopovFix pylint W0613: Unused argument 'mode'
 commit | commitdiff | tree
2024-01-15 Alexander PopovUpdate the NixOS configs
 commit | commitdiff | tree
2024-01-14 Alexander PopovDon't add options without explicitly recommended values...
commit | commitdiff | tree
2024-01-14 Alexander PopovUBSAN_SANITIZE_ALL is now available for ARM
 commit | commitdiff | tree
2023-12-30 Alexander PopovFix the order in the vdso32 check (part II)
 commit | commitdiff | tree
2023-12-30 Alexander PopovFix the order in the vdso32 check
 commit | commitdiff | tree
2023-12-30 Alexander PopovImprove the hackish refinement of the CONFIG_ARCH_MMAP_RND_B...
commit | commitdiff | tree
2023-12-30 Alexander PopovShow the option type in print_unknown_options()
 commit | commitdiff | tree
2023-12-30 Alexander PopovUse raw strings for regular expression
 commit | commitdiff | tree
2023-12-30 Alexander PopovFix the 'decision' for the 'AIO' check
 commit | commitdiff | tree
2023-12-29 Alexander PopovFix the 'decision' for the 'vdso32' check
 commit | commitdiff | tree
2023-12-29 Alexander PopovImprove the comment for the 'slab_common.usercopy_fallback...
commit | commitdiff | tree
2023-12-28 Alexander PopovFix the arch condition for the SCHED_CORE check (III)
 commit | commitdiff | tree
2023-12-28 Alexander PopovUpdate the KSPP recommendations
 commit | commitdiff | tree
2023-12-28 Alexander PopovFix the arch for the CPU_SRSO check (it's available...
commit | commitdiff | tree
2023-12-28 Alexander PopovSplit the HW_RANDOM_TPM check (it's enabled by default...
commit | commitdiff | tree
2023-12-28 Alexander PopovChange the 'decision' of the INIT_STACK_ALL_ZERO check
 commit | commitdiff | tree
2023-12-17 Alexander PopovAdd defconfigs for Linux v6.6
 commit | commitdiff | tree
2023-12-16 Alexander PopovAdd the RANDOM_KMALLOC_CACHES check
 commit | commitdiff | tree
2023-12-16 Alexander PopovAdd the SECURITY_SELINUX_DEBUG check
 commit | commitdiff | tree
2023-12-16 Alexander PopovFix the 'decision' for the LEGACY_TIOCSTI check
 commit | commitdiff | tree
2023-12-16 Alexander PopovAdd the CONFIG_LIST_HARDENED check
 commit | commitdiff | tree
2023-12-09 Alexander PopovAdd the gather_data_sampling check
 commit | commitdiff | tree
2023-12-09 Alexander PopovAdd the CPU_SRSO check
 commit | commitdiff | tree
2023-12-09 Alexander PopovAdd the SPECULATION_MITIGATIONS check
 commit | commitdiff | tree
2023-12-09 Alexander PopovAdd the spec_rstack_overflow check
 commit | commitdiff | tree
2023-12-09 Alexander PopovAdd the MODULE_FORCE_LOAD check
 commit | commitdiff | tree
2023-12-02 Alexander PopovUpdate the README
 commit | commitdiff | tree
2023-12-02 Alexander PopovAdd the check for dis_ucode_ldr
 commit | commitdiff | tree
2023-12-02 Alexander PopovAdd the MICROCODE_INTEL and MICROCODE_AMD checks
 commit | commitdiff | tree
2023-12-02 Alexander PopovAdd a check for the 'kfence.sample_interval' boot parameter
 commit | commitdiff | tree
2023-12-02 Alexander PopovAdd the KFENCE_SAMPLE_INTERVAL check
 commit | commitdiff | tree
2023-12-02 Alexander PopovKeep the recommendation to disable kernel modules
 commit | commitdiff | tree
2023-12-02 Alexander PopovAdd a comment about 'kernel.modules_disabled'
 commit | commitdiff | tree
2023-10-18 Alexander PopovFix the reason for the 'kernel.yama.ptrace_scope' check
 commit | commitdiff | tree
2023-10-17 Alexander PopovAdd kspp-recommendations/kspp-sysctl.txt
 commit | commitdiff | tree
2023-10-17 Alexander PopovFix the reason for the nosmt check
 commit | commitdiff | tree
2023-10-17 Alexander PopovUpdate kspp-cmdline-x86-64.txt
 commit | commitdiff | tree
next
kconfig-hardened-check