kconfig-hardened-check.git
2020-03-31 Alexander PopovRename some workflow steps
2020-03-30 Alexander PopovAdd more tests to increase coverage - III
2020-03-30 Alexander PopovAdd more tests to increase coverage - II
2020-03-30 Alexander PopovAdd more tests to increase coverage - I
2020-03-30 Alexander PopovCollect coverage
2020-03-30 Alexander PopovCount checked configs
2020-03-30 Alexander PopovCheck all configs automatically
2020-03-30 Alexander PopovRevisit return values
2020-03-30 Alexander PopovCreate the github workflow for functional tests
2020-03-28 Alexander PopovFix the shebang to allow `./get-nix-kconfig.py`
2020-03-27 Alexander PopovAdd NixOS hardened kernel config
2020-03-26 Alexander PopovFix typo in README
2020-03-26 Alexander PopovAdd vim swp files to gitignore
2020-03-26 Alexander PopovMerge branch 'nix'
2020-03-26 Jörg Thalheimadd script to download linux kernel configs from nix
2020-03-26 Jörg Thalheimadd gitignore
2020-03-26 Jörg Thalheimadd default.nix for installation via nix
2020-03-26 Alexander PopovUpdate the README (describing installation)
2020-03-26 Alexander PopovAdd a wrapper for using the tool without installation...
2020-03-26 Alexander PopovEnable distribution via pip/setuptools
2020-03-26 Alexander PopovCall it a tool
2020-03-26 Alexander PopovUh, setuptools doesn't like package names that contain...
2020-03-25 Alexander PopovAdd main() and clean up working with globals
2020-03-25 Alexander PopovRename to kconfig-hardened-check/__init__.py
2020-03-25 Alexander PopovMove files to kconfig-hardened-check folder
2020-03-25 Alexander PopovRename LICENSE file
2020-03-24 Alexander PopovVersion 0.5.5 (supports Linux kernel v5.5) v0.5.5
2020-03-24 Alexander PopovUpdate the README
2020-03-24 Alexander PopovCLIP OS recommends disabling Intel TSX
2020-03-24 Alexander PopovSmall syctl cleanup
2020-03-23 Alexander PopovMerge pull request #34 from madaidan/grapheneos
2020-03-22 madaidanGrapheneOS is the continuation of CopperheadOS 34/head
2020-03-20 Alexander PopovCopperheadOS disables the kernel's CONFIG_AIO feature
2020-03-20 Alexander PopovKSPP now recommends PAGE_TABLE_ISOLATION for X86_32
2020-03-20 Alexander PopovUpdate KSPP recommendations
2020-03-18 Alexander PopovINTEL_IOMMU is available for X86_32
2020-03-18 Alexander PopovMove VMSPLIT_3G to 'userspace_hardening'
2020-03-18 Alexander PopovStyle fix
2020-03-18 Alexander PopovIOMMU_SUPPORT is needed for all architectures
2020-03-18 Alexander PopovSECURITY_WRITABLE_HOOKS and SECURITY_SELINUX_DISABLE...
2020-03-18 Alexander PopovAdd CLIP OS recommendation about X86_CPUID
2020-03-18 Alexander PopovFix RANDOM_TRUST_BOOTLOADER check
2020-03-18 Alexander PopovLOCKDOWN update - part II
2020-03-18 Alexander PopovLOCKDOWN update - part I
2020-03-18 Alexander PopovDon't restrict arch for "is not set" checks
2020-03-17 Alexander PopovSECURITY_LOCKDOWN_LSM is recommended by CLIP OS
2020-03-08 Alexander PopovAdd CONFIG_INTEGRITY for userspace hardening
2020-03-08 Alexander PopovFix the comments
2020-03-08 Alexander PopovDon't show all checks from all supported platforms...
2020-03-07 Alexander PopovImprove 'dunno' report in debug_mode
2020-03-06 Alexander PopovAdd SECURITY_LOADPIN_ENFORCE check
2020-03-06 Alexander PopovUpdate CLIP OS kernel security documentation
2020-03-06 Alexander PopovAdd CLIP OS recommendation about CONFIG_STAGING
2020-03-06 Alexander PopovAdd CLIP OS recommendation about CONFIG_RANDOM_TRUST_BO...
2020-03-06 Alexander PopovUpdate the README
2020-03-06 Alexander PopovImprove debug_mode a lot
2020-03-06 Alexander PopovImprove the table header
2020-03-06 Alexander PopovDrop unused OptCheck printing
2020-03-05 Alexander PopovUpdate 'decision' for new KSPP recommendations
2020-03-05 Alexander PopovUpdate KSPP recommendations
2020-03-05 Alexander PopovUpdate the README
2020-03-05 Alexander PopovLDISC_AUTOLOAD can be disabled since v5.1
2020-03-05 Alexander PopovREFCOUNT_FULL is enabled by default since v5.5
2020-03-05 Alexander PopovAdd kernel version checks for complex checks with logic...
2020-03-05 Alexander PopovAdd kernel version detection
2020-03-05 Alexander PopovSimplify perform_checks()
2020-03-04 Alexander PopovFix versions in KSPP recommendations
2020-03-04 Alexander PopovFix the name for ClearLinux config
2020-03-04 Alexander PopovSTACKPROTECTOR_PER_TASK is now default for ARM
2020-03-04 Alexander PopovSECURITY_WRITABLE_HOOKS is not disabled by default
2020-03-04 Alexander PopovInclude GCC_PLUGINS to defconfig
2020-03-04 Alexander PopovUpdate defconfigs (v5.5)
2020-02-27 Alexander PopovMerge branch 'config-updates-from-hackurx'
2020-02-26 LoïcUpdate of the kconfig-hardened-check.py part 31/head
2020-02-26 LoïcAdd link for clearlinux
2020-02-26 LoïcAdd clearlinux-master
2020-02-24 LoïcUpdate to 5.3.0-28-generic (LTS HWE)
2020-02-24 LoïcRemove debian-stretch.config
2020-02-24 LoïcAdd link for amazonlinux2
2020-02-24 LoïcUpdate to 4.14.165-133.209.amzn2.x86_64
2020-02-24 LoïcUpdate to 5.4.21
2020-02-24 LoïcUpdate to openSUSE-15.1
2020-02-24 LoïcUpdate to 5.3.16 (SLE15-SP2)
2020-02-24 LoïcUpdate to SLE15-SP2 and openSUSE-15.1
2020-02-24 LoïcUpdate to 5.4.21
2020-02-24 LoïcUpdate to 5.5.5-pentoo
2020-02-24 LoïcUpdate of some links
2020-02-24 LoïcUpdate to 5.4.1 (uek6)
2020-02-24 LoïcUpdate to 4.18.0-147.5.1.el8_1.x86_64
2020-02-24 LoïcUpdate to config-4.19.0-8-amd64
2020-01-14 Alexander PopovFix INIT_ON_FREE_DEFAULT_ON vs PAGE_POISONING issue #28
2020-01-14 Alexander PopovAnswer the question about CONFIG_PANIC_ON_OOPS
2020-01-11 Alexander PopovRecommend disabling VIDEO_VIVID
2020-01-10 Alexander PopovTake some ideas from NixOS/nixpkgs hardened kernel...
2019-12-02 Alexander PopovPretty printing
2019-11-29 Alexander PopovVersion 0.5.3 (supports Linux kernel v5.3) v0.5.3
2019-11-29 Alexander PopovAdd the link to Linux Kernel Defence Map
2019-11-29 Alexander PopovUpdate the README
2019-11-29 Alexander PopovUpdate defconfigs
2019-11-29 Alexander PopovRANDOMIZE_BASE is now enabled by default on arm64
next