jxself.org public git repositories - kconfig-hardened-check.git/search

projects / kconfig-hardened-check.git / search

2024-03-11	Alexander Popov	Improve the DEBUG_CREDENTIALS check	commit \| commitdiff \| tree
2024-03-10	Alexander Popov	Fix the false result of the REFCOUNT_FULL check for...	commit \| commitdiff \| tree
2024-03-09	Alexander Popov	Have to revert codecov back to v3	commit \| commitdiff \| tree
2024-03-09	Alexander Popov	Update codecov-action	commit \| commitdiff \| tree
2024-03-09	Alexander Popov	Adapt test_version() in the unittest	commit \| commitdiff \| tree
2024-03-09	Alexander Popov	Check all 3 numbers of the kernel version in VersionCheck	commit \| commitdiff \| tree
2024-03-09	Alexander Popov	Fix the fresh set_state() bug found by unittest	commit \| commitdiff \| tree
2024-03-09	Alexander Popov	Make `python -m unittest` show the whole output	commit \| commitdiff \| tree
2024-03-09	Alexander Popov	Update github actions	commit \| commitdiff \| tree
2024-03-09	Alexander Popov	Implement the set_state() method of the check classes	commit \| commitdiff \| tree
2024-03-09	Alexander Popov	Use 3 numbers in the VersionCheck constructor	commit \| commitdiff \| tree
2024-03-09	Alexander Popov	Parse all numbers of the kernel version	commit \| commitdiff \| tree
2024-03-09	Alexander Popov	Skip the kernel version part after '-'	commit \| commitdiff \| tree
2024-03-04	Alexander Popov	Add the ia32_emulation check	commit \| commitdiff \| tree
2024-02-19	Alexander Popov	Add MODULE_SIG_SHA3_512 as a valid option	commit \| commitdiff \| tree
2024-02-17	Alexander Popov	Make LOCKDOWN_LSM 'self_protection', not 'security_policy'	commit \| commitdiff \| tree
2024-01-16	Alexander Popov	Ready for the release 0.6.6	commit \| commitdiff \| tree
2024-01-16	Alexander Popov	Update issues.md	commit \| commitdiff \| tree
2024-01-16	Alexander Popov	Update the README	commit \| commitdiff \| tree
2024-01-16	Alexander Popov	Update the Ubuntu example configs	commit \| commitdiff \| tree
2024-01-16	Alexander Popov	Don't print the warning about ARCH_MMAP_RND_BITS in...	commit \| commitdiff \| tree
2024-01-16	Alexander Popov	Improve the check of DEBUG_NOTIFIERS feature (part 2)	commit \| commitdiff \| tree
2024-01-16	Alexander Popov	Improve the check of DEBUG_NOTIFIERS feature	commit \| commitdiff \| tree
2024-01-16	Alexander Popov	Improve the check of SCHED_STACK_END_CHECK.	commit \| commitdiff \| tree
2024-01-16	Alexander Popov	Fix style (III)	commit \| commitdiff \| tree
2024-01-16	Alexander Popov	Fix style (II)	commit \| commitdiff \| tree
2024-01-16	Alexander Popov	Fix style (I)	commit \| commitdiff \| tree
2024-01-16	Alexander Popov	Disable pylint too-many-locals, it's not useful for...	commit \| commitdiff \| tree
2024-01-16	Alexander Popov	Fix pylint W0613: Unused argument 'arch'	commit \| commitdiff \| tree
2024-01-16	Alexander Popov	Fix pylint E1101: Instance of 'OptCheck' has no 'type...	commit \| commitdiff \| tree
2024-01-16	Alexander Popov	Fix pylint W0613: Unused argument 'mode'	commit \| commitdiff \| tree
2024-01-15	Alexander Popov	Update the NixOS configs	commit \| commitdiff \| tree
2024-01-14	Alexander Popov	Don't add options without explicitly recommended values...	commit \| commitdiff \| tree
2024-01-14	Alexander Popov	UBSAN_SANITIZE_ALL is now available for ARM	commit \| commitdiff \| tree
2023-12-30	Alexander Popov	Fix the order in the vdso32 check (part II)	commit \| commitdiff \| tree
2023-12-30	Alexander Popov	Fix the order in the vdso32 check	commit \| commitdiff \| tree
2023-12-30	Alexander Popov	Improve the hackish refinement of the CONFIG_ARCH_MMAP_RND_B...	commit \| commitdiff \| tree
2023-12-30	Alexander Popov	Show the option type in print_unknown_options()	commit \| commitdiff \| tree
2023-12-30	Alexander Popov	Use raw strings for regular expression	commit \| commitdiff \| tree
2023-12-30	Alexander Popov	Fix the 'decision' for the 'AIO' check	commit \| commitdiff \| tree
2023-12-29	Alexander Popov	Fix the 'decision' for the 'vdso32' check	commit \| commitdiff \| tree
2023-12-29	Alexander Popov	Improve the comment for the 'slab_common.usercopy_fallback...	commit \| commitdiff \| tree
2023-12-28	Alexander Popov	Fix the arch condition for the SCHED_CORE check (III)	commit \| commitdiff \| tree
2023-12-28	Alexander Popov	Update the KSPP recommendations	commit \| commitdiff \| tree
2023-12-28	Alexander Popov	Fix the arch for the CPU_SRSO check (it's available...	commit \| commitdiff \| tree
2023-12-28	Alexander Popov	Split the HW_RANDOM_TPM check (it's enabled by default...	commit \| commitdiff \| tree
2023-12-28	Alexander Popov	Change the 'decision' of the INIT_STACK_ALL_ZERO check	commit \| commitdiff \| tree
2023-12-17	Alexander Popov	Add defconfigs for Linux v6.6	commit \| commitdiff \| tree
2023-12-16	Alexander Popov	Add the RANDOM_KMALLOC_CACHES check	commit \| commitdiff \| tree
2023-12-16	Alexander Popov	Add the SECURITY_SELINUX_DEBUG check	commit \| commitdiff \| tree
2023-12-16	Alexander Popov	Fix the 'decision' for the LEGACY_TIOCSTI check	commit \| commitdiff \| tree
2023-12-16	Alexander Popov	Add the CONFIG_LIST_HARDENED check	commit \| commitdiff \| tree
2023-12-09	Alexander Popov	Add the gather_data_sampling check	commit \| commitdiff \| tree
2023-12-09	Alexander Popov	Add the CPU_SRSO check	commit \| commitdiff \| tree
2023-12-09	Alexander Popov	Add the SPECULATION_MITIGATIONS check	commit \| commitdiff \| tree
2023-12-09	Alexander Popov	Add the spec_rstack_overflow check	commit \| commitdiff \| tree
2023-12-09	Alexander Popov	Add the MODULE_FORCE_LOAD check	commit \| commitdiff \| tree
2023-12-02	Alexander Popov	Update the README	commit \| commitdiff \| tree
2023-12-02	Alexander Popov	Add the check for dis_ucode_ldr	commit \| commitdiff \| tree
2023-12-02	Alexander Popov	Add the MICROCODE_INTEL and MICROCODE_AMD checks	commit \| commitdiff \| tree
2023-12-02	Alexander Popov	Add a check for the 'kfence.sample_interval' boot parameter	commit \| commitdiff \| tree
2023-12-02	Alexander Popov	Add the KFENCE_SAMPLE_INTERVAL check	commit \| commitdiff \| tree
2023-12-02	Alexander Popov	Keep the recommendation to disable kernel modules	commit \| commitdiff \| tree
2023-12-02	Alexander Popov	Add a comment about 'kernel.modules_disabled'	commit \| commitdiff \| tree
2023-10-18	Alexander Popov	Fix the reason for the 'kernel.yama.ptrace_scope' check	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	Add kspp-recommendations/kspp-sysctl.txt	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	Fix the reason for the nosmt check	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	Update kspp-cmdline-x86-64.txt	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	Add the 'dev.tty.legacy_tiocsti' check	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	Add the 'kernel.randomize_va_space' check	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	Add the 'fs.suid_dumpable' check	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	Change the reason of the COREDUMP check	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	Add the 'fs.protected_regular' check	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	Add the 'fs.protected_fifos' check	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	Add the 'fs.protected_hardlinks' check	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	Add the 'fs.protected_symlinks' check	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	Add the 'vm.unprivileged_userfaultfd' check	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	Add the 'kernel.yama.ptrace_scope' check	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	Add the 'kernel.kptr_restrict' check	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	Improve the slab_common.usercopy_fallback check	commit \| commitdiff \| tree
2023-10-17	Alexander Popov	hardened_usercopy=1 is now officially recommended by...	commit \| commitdiff \| tree
2023-10-16	Alexander Popov	Enabling page_alloc.shuffle is now recommended by KSPP	commit \| commitdiff \| tree
2023-10-16	Alexander Popov	'mitigations=auto,nosmt' is now recommended by KSPP	commit \| commitdiff \| tree
2023-10-16	Alexander Popov	Disabling X86_VSYSCALL_EMULATION is now recommended...	commit \| commitdiff \| tree
2023-10-04	Alexander Popov	Drop ZERO_CALL_USED_REGS in favour of backward-edge CFI	commit \| commitdiff \| tree
2023-09-18	Alexander Popov	Update the README	commit \| commitdiff \| tree
2023-09-18	Alexander Popov	Refactor the assertion in colorize_result() to improve...	commit \| commitdiff \| tree
2023-09-17	Alexander Popov	Update the backup in issues.md	commit \| commitdiff \| tree
2023-09-17	Alexander Popov	Renaming fixes	commit \| commitdiff \| tree
2023-09-17	Alexander Popov	Drop default.nix (it contains a wrong utility name...	commit \| commitdiff \| tree
2023-09-17	Alexander Popov	kconfig-hardened-check -> kernel-hardening-checker	commit \| commitdiff \| tree
2023-09-17	Alexander Popov	test_engine: add test_complex_nested()	commit \| commitdiff \| tree
2023-09-17	Alexander Popov	test_engine: improve the output	commit \| commitdiff \| tree
2023-09-16	Alexander Popov	test_engine: improve the test_stdout()	commit \| commitdiff \| tree
2023-09-16	Alexander Popov	test_engine: refactor test_complex_or() and test_complex_and()	commit \| commitdiff \| tree
2023-09-13	Alexander Popov	Don't remove ANSI colors, adapt the testcases instead	commit \| commitdiff \| tree
2023-09-03	Alexander Popov	Fix arch conditions for some CmdlineChecks	commit \| commitdiff \| tree
2023-08-28	Alexander Popov	Make the functional tests more informative	commit \| commitdiff \| tree
2023-08-28	Alexander Popov	Test more wrong combinations of options	commit \| commitdiff \| tree
2023-08-28	Alexander Popov	Test checking sysctl separately	commit \| commitdiff \| tree
next

kconfig-hardened-check

RSS Atom