a13xp0p0v kernel-hardening-checker issues

a13xp0p0v / kernel-hardening-checker

A tool for checking the security hardening options of the Linux kernel

GNU General Public License v3.0

1.67k stars 152 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Add PTDUMP_DEBUGFS (arm64)

#162 citypw opened 1 week ago
0
implementation of `detect_arch_sysctl()`

#161 flipthewho closed 1 day ago
5
sysctl parsing fixes

#160 a13xp0p0v closed 1 month ago
0
sysctl parsing has a small problem

#159 hyder365 closed 1 month ago
2
Implement `detect_arch_sysctl()`

#158 a13xp0p0v closed 1 day ago
0
implementation of `vm.mmap_min_addr = 65536` sysctl check

#157 flipthewho opened 1 month ago
4
implementation of `CONFIG_CFI_AUTO_DEFAULT `

#156 flipthewho closed 3 weeks ago
3
Unitest addons

#155 Willenst closed 1 month ago
4
Add kconfig option `CONFIG_CFI_AUTO_DEFAULT` which is twin of `cfi=kcfi`

#154 flipthewho closed 1 month ago
0
Implement the `vm.mmap_min_addr = 65536` sysctl check

#153 a13xp0p0v opened 1 month ago
0
Add io_uring_disabled similar to CONFIG_IO_URING in kconfig

#152 Willenst closed 1 month ago
5
Implement parsing of the `CONFIG_LSM` kconfig option

#151 a13xp0p0v opened 1 month ago
0
Add ARM SMMU check options

#150 citypw closed 1 month ago
3
Add kconfig option `CONFIG_CFI_AUTO_DEFAULT`

#149 winterknife closed 3 weeks ago
2
Simplify a bit the detect_arch function

#148 jvoisin closed 2 months ago
1
New kconfig SECURITY_PROC_MEM_RESTRICT_WRITES

#147 osevan closed 2 months ago
2
Implement the `CONFIG_ARCH_MMAP_RND_COMPAT_BITS` check

#146 a13xp0p0v opened 2 months ago
1
Relatively low code coverage in the engine unit test

#145 a13xp0p0v closed 1 month ago
1
Add the `with care` column

#144 a13xp0p0v opened 3 months ago
0
__init__.py: do not exit on unexpected line

#143 ffontaine closed 2 months ago
11
Tweak the checks for android

#142 jvoisin closed 3 months ago
3
Use a proper regex to extract kernel version

#141 jvoisin closed 3 months ago
0
Add two PAGE_TABLE_CHECK related checks from kspp

#140 jvoisin closed 3 months ago
1
Tweak the checks for android

#139 jvoisin closed 3 months ago
6
Add a couple of grsecurity disabled options

#138 jvoisin closed 1 month ago
2
Add Google's kernelctf attack surface reduction

#137 jvoisin opened 4 months ago
3
CI: Add pylint

#136 a13xp0p0v closed 4 months ago
0
Put two x86-related checks behind an arch check

#135 jvoisin closed 3 months ago
0
Add a check to `_open`

#134 jvoisin closed 4 months ago
1
Which Python versions should `kernel-hardening-checker` support?

#133 a13xp0p0v closed 1 month ago
6
Add CONFIG_AMD_MEM_ENCRYPT

#132 jvoisin opened 5 months ago
0
Add a check for CONFIG_UNWIND_PATCH_PAC_INTO_SCS

#131 jvoisin closed 3 months ago
1
Add a --autodetect option

#130 jvoisin opened 5 months ago
3
Improve --kernel-version and --cmdline

#129 jvoisin opened 5 months ago
4
Add an add_x86_only_kconfig_checks and an add_arm_only_kconfig_checks function

#128 jvoisin opened 5 months ago
7
Handle the CPU side-channels 6.9 renaming

#127 jvoisin closed 4 months ago
1
Disable codecov upload for pull-requests

#126 jvoisin closed 5 months ago
6
Don't fail some sysctl checks if a config option already takes care of it

#125 cotequeiroz closed 5 months ago
3
Skip clang specific tests when using gcc

#124 cotequeiroz closed 5 months ago
1
Skip CPU-dependent checks if CPU is not supported

#123 cotequeiroz closed 5 months ago
0
Disable `CONFIG_N_GSM`

#122 cgzones closed 2 months ago
2
Add some lightweight typing

#121 jvoisin closed 4 months ago
8
Add a check for X86_USER_SHADOW_STACK

#120 jvoisin closed 5 months ago
1
Integration with oracle/kconfigs

#119 evdenis opened 6 months ago
2
The separation between desktop and server.

#118 migrgh closed 1 month ago
4
Linux 6.9 Renames Many CPU Mitigation CONFIGs to CONFIG_MITIGATION_...

#117 wryMitts closed 4 months ago
1
Add check for CONFIG_MITIGATION_RFDS

#116 wryMitts closed 4 months ago
1
Improve JSON output format for enhanced processing

#115 krishjainx closed 6 months ago
4
Add kconfig option for Intel CET shadow stack

#114 winterknife closed 5 months ago
0
Suggestions for kernel-hardening-checker

#113 asarubbo closed 1 month ago
4