Commit Graph

Select branches

Hide Pull Requests

master

20260108

kernel-hardening-checker-2026-01-08

Mono Color

• 93746f4667 Update example_sysctls.txt from a dummy Ubuntu VM again master kernel-hardening-checker-2026-01-08 20260108 Alexander Popov 2025-12-27 21:41:07 +03:00
• cfb56cabd7 Move the mirror to SourceCraft Alexander Popov 2025-12-27 19:20:47 +03:00
• 0bcde64140 Fix ruff's ISC004 (part II) Alexander Popov 2025-12-20 15:47:18 +03:00
• 78c566b681 Fix ruff's ISC004 (unparenthesized implicit string concatenation in collection) Alexander Popov 2025-12-20 15:34:03 +03:00
• ef163e2a4e Reorder the badges Alexander Popov 2025-12-20 15:12:59 +03:00
• e2890ca735 CI: Check bin/kernel-hardening-checker with pylint Alexander Popov 2025-12-13 21:50:05 +03:00
• 0adbbd64c6 Merge branch 'ruff' Alexander Popov 2025-12-13 21:38:30 +03:00
• a62eea25de Add ruff to CI! Alexander Popov 2025-12-13 20:15:43 +03:00
• 6a4cd3d1a9 Fix the import order in bin/kernel-hardening-checker Alexander Popov 2025-12-13 20:15:11 +03:00
• e1522dedd9 Ignore the ruff E402 rule for bin/kernel-hardening-checker Alexander Popov 2025-12-13 20:14:31 +03:00
• 1183e74162 Improve the comments in [tool.ruff.lint.per-file-ignores] Alexander Popov 2025-12-13 19:58:01 +03:00
• 94bae0f6bf Don't ignore the ruff PLR5501 rule (we fixed the errors) Alexander Popov 2025-12-13 19:57:02 +03:00
• 14c7ed368a Don't ignore the ruff E202 and E502 rules (we fixed the errors) Alexander Popov 2025-12-13 19:55:54 +03:00
• e3cf44aa30 Mute the ruff PLR0912 rule globally Alexander Popov 2025-12-13 19:52:03 +03:00
• 28b09c634b Drop the unneeded changes in the pylint default settings Alexander Popov 2025-12-13 19:49:44 +03:00
• d104af82d9 Drop the unneeded ruff PLR2004 exception (magic number refactoring is done) Alexander Popov 2025-12-13 19:48:48 +03:00
• 04ae6d8034 Style fix Alexander Popov 2025-12-13 19:46:54 +03:00
• 77a8efee65 Improve the comments for the ignored ruff rules Alexander Popov 2025-12-13 19:45:21 +03:00
• 13c1b8343f Configure flake8-copyright to avoid false warnings Alexander Popov 2025-12-13 19:32:32 +03:00
• 434e946b25 Use elif instead of else then if, to reduce indentation (fix PLR0915) Alexander Popov 2025-12-13 19:26:00 +03:00
• 2103b38535 Use a list comprehension to create a transformed list (fix PERF401) Alexander Popov 2025-12-13 19:19:16 +03:00
• 646f6c83aa Rewrite unnecessary map() usage using a generator expression (fix C417) Alexander Popov 2025-12-13 19:02:47 +03:00
• b086285ed0 __init__.py: Introduce generate_kconfig_fragment() Alexander Popov 2025-12-13 18:42:37 +03:00
• 80755f3c18 __init__.py: Introduce print_recommendations() Alexander Popov 2025-12-13 18:42:14 +03:00
• a3319f4f5e __init__.py: Introduce check_configuration() Alexander Popov 2025-12-13 18:41:13 +03:00
• f34f4c3cbb __init__.py: Introduce check_autodetected_configuration() Alexander Popov 2025-12-13 18:38:47 +03:00
• 7859f3e2a2 Fix SIM102 (use a single if statement instead of nested if statements) Alexander Popov 2025-12-13 18:37:08 +03:00
• dab2ef90f7 Fix SIM910 (dict-get-with-none-default) Alexander Popov 2025-12-13 18:35:14 +03:00
• 83d0f992e5 Get rid of magic numbers (PLR2004) Alexander Popov 2025-12-13 17:44:06 +03:00
• e9026dee41 Fix E202 (whitespace before ']') Alexander Popov 2025-12-13 17:19:35 +03:00
• 4055542d93 Drop unneded \ in test_engine.py Willenst 2025-12-09 23:13:25 +02:00
• 57b29b0711 Make __init__.py executable Alexander Popov 2025-12-13 16:29:40 +03:00
• 2dea59f0c8 Add a trailing comma through the code. Willenst 2025-12-09 23:06:34 +02:00
• fbfec0030b Replace string in re.match with raw string Willenst 2025-12-09 23:05:27 +02:00
• 9794b7dd7b Unify the quotes in the code Willenst 2025-12-09 22:59:37 +02:00
• 8573d5d149 Simplify __init__.py code Willenst 2025-12-09 22:57:51 +02:00
• 00676de06d Fix the ruff PLC1901 error (simplify comparing with empty string) Alexander Popov 2025-12-13 16:04:40 +03:00
• 93b6b8c2f2 Fix the ruff PLW2901 error (don't overwrite the loop variable) Alexander Popov 2025-12-13 15:56:21 +03:00
• f65170c615 Sort imports in all scripts Willenst 2025-12-09 22:44:11 +02:00
• 5be9d4bada Change literal-memberships from list to sets Willenst 2025-12-09 21:53:28 +02:00
• 9a6593aedf Enable the pylint line-too-long check Alexander Popov 2025-12-13 15:23:27 +03:00
• 3f2c6601fc Fix ruff E501 errors and drop some per-file-ignores statements Alexander Popov 2025-12-13 15:15:37 +03:00
• 70eafc1007 Add whitespace after each assertion Willenst 2025-12-09 21:11:14 +02:00
• 1f2a9ed55c Improve the comments throughout the code Willenst 2025-12-09 21:08:58 +02:00
• 50d999f037 Drop unneded whitespaces in test_engine.py code Willenst 2025-12-09 21:05:27 +02:00
• 473aea74df Add some more ruff rules and reorder them according to the documentation Alexander Popov 2025-12-13 14:21:17 +03:00
• d77d1fce16 Move ruff settings to the end of pyproject.toml Alexander Popov 2025-12-13 13:53:20 +03:00
• 322e7a0f59 Add ruff rules setup Willenst 2025-12-09 21:01:18 +02:00
• a1030ff5f1 Merge branch 'apparmor' Alexander Popov 2025-12-13 09:18:01 +03:00
• 52e26c9292 Avoid false negative errors for distros without AppArmor Alexander Popov 2025-12-13 09:05:05 +03:00
• 1214043c45 Improve the comments Alexander Popov 2025-12-13 08:51:33 +03:00
• 275c9b5775 Exclude checking number of lines from checks.py Willenst 2025-11-24 13:54:30 +02:00
• 820e4036b8 Move apparmor_restrict_unprivileged_unconfined check in a propper place Willenst 2025-11-24 13:48:34 +02:00
• 4617587683 Change decision for AppArmor hardening Willenst 2025-11-24 13:43:49 +02:00
• 24a84c9f0c Fix comments grammar Willenst 2025-11-24 13:42:23 +02:00
• 97fe9a7804 add apparmor_restrict_unprivileged_unconfined check Willenst 2025-11-20 15:37:02 +02:00
• 7ba6fdf929 Fix ERROR: unexpected line in sysctl file: "sysctl: reading key..." Alexander Popov 2025-11-24 10:51:42 +03:00
• e8f999b3d9 Update the decision for CONFIG_PROC_MEM_NO_FORCE and proc_mem.force_override Alexander Popov 2025-11-24 02:48:32 +03:00
• f334590af6 Merge branch 'no_permisson_handling' Alexander Popov 2025-11-24 01:51:18 +03:00
• c33e398855 By the way, use re.match() instead of re.search() to avoid mistakes Alexander Popov 2025-11-24 01:08:53 +03:00
• 051329def9 Fix the muted warning about sysctl options available for root Alexander Popov 2025-11-24 01:05:21 +03:00
• a0263bcb4c Improve the sysctl "permission denied" pattern matching Alexander Popov 2025-11-24 00:57:22 +03:00
• a94b4342f8 Add handling for sysctls without permission Willenst 2025-11-21 13:38:57 +02:00
• 0cabb197a9 Merge remote-tracking branch 'Willenst/code_actualization' Alexander Popov 2025-11-23 14:37:23 +03:00
• a6b56970bb Merge branch 'ipv6_disabled' Alexander Popov 2025-11-23 11:52:48 +03:00
• 0e00c8072a Don't normalize the 'ipv6.disable' cmdline parameter Alexander Popov 2025-11-23 11:35:22 +03:00
• 51a6104c0f Remove rt from oppening file Willenst 2025-11-21 17:30:34 +02:00
• 44fbc44642 Get rid of some legacy typing code Willenst 2025-11-21 14:13:58 +02:00
• 14040cdf8f fix(checks.py): handle false negative properly if ipv6.disable=1 valera disgrace 2025-11-10 11:01:47 +10:00
• afc376f2a9 Ready for the release 0.6.17.1 Alexander Popov 2025-11-02 02:18:23 +03:00
• 133fe5a297 Update issues.md Alexander Popov 2025-11-02 02:11:56 +03:00
• 4c0d3a4fe6 Update the README Alexander Popov 2025-11-01 20:06:12 +03:00
• 3e0ba921bb Merge branch 'prepare-release' Alexander Popov 2025-11-01 18:21:25 +03:00
• 7bad655a30 Check the Ghostwrite CPU vulnerability mitigation for RISC-V Alexander Popov 2025-10-31 20:46:57 +03:00
• 53e8b4a156 Update the NixOS kernel configs Alexander Popov 2025-10-30 21:52:42 +03:00
• 6b73f7c4eb Update distro configs Alexander Popov 2025-10-30 21:48:28 +03:00
• 5a47a4f3bc Merge branch 'prepare-release' Alexander Popov 2025-10-29 21:27:14 +03:00
• 8039afaf63 Add the hash_pointers cmdline check Alexander Popov 2025-10-27 19:55:52 +03:00
• bec47b7e68 Simplify the vdso32 check for X86_64 Alexander Popov 2025-10-27 19:45:38 +03:00
• b2c78eeded Merge branch 'patch-1' Alexander Popov 2025-10-29 21:24:23 +03:00
• 1817829e3f Fix Markdown style Alexander Popov 2025-10-29 21:20:32 +03:00
• b6c8fd5dbb Fix Woodpecker CI (nice trick!) Alexander Popov 2025-10-29 21:17:01 +03:00
• 206f90292f Merge branch 'new_tests' Alexander Popov 2025-10-29 16:09:11 +03:00
• 363a6a3ce6 Add the comment about the limitations in override_expected_value() Alexander Popov 2025-10-29 15:58:59 +03:00
• abf5a2e8c2 Simplify test_complex_value_overriding() a bit Alexander Popov 2025-10-29 15:43:02 +03:00
• f52ff3a129 Reorganize the tests of option list checks in the engine unit-test Alexander Popov 2025-10-29 15:26:02 +03:00
• 4e287bcd01 Check one extra space in the result parsing in ComplexOptCheck Alexander Popov 2025-10-29 15:23:40 +03:00
• c49a6f115a Add tests for full coverage of override_expected_value() Willenst 2025-10-24 19:23:52 +02:00
• ba26f8e188 Add extra unit tests for lists hadnling Willenst 2025-10-24 19:22:21 +02:00
• aebce0373b Remove unneded quote check Willenst 2025-10-24 16:36:54 +02:00
• 9a5a8726e1 Add test for color emulations Willenst 2025-10-17 19:45:35 +02:00
• e6101864bc Add test for simulation of no kconfigs in system Willenst 2025-10-17 19:13:26 +02:00
• 9387c0f984 Add test for broken sysctl binary Willenst 2025-10-17 19:11:17 +02:00
• 1cc5a1f87f Add test for no sysctl in PATH Willenst 2025-10-17 19:07:48 +02:00
• 61e6c66735 Update README with link to package manager versions Alex Myczko 2025-10-28 13:58:18 +01:00
• d0a66a405f Fix false negative error in the vm.mmap_rnd_compat_bits check Alexander Popov 2025-10-26 12:57:25 +03:00
• 61c710f25d Merge branch 'prepare-release' Alexander Popov 2025-10-26 01:19:22 +03:00
• 36ba16b097 Update the HIGHMEM64G check Alexander Popov 2025-10-26 00:46:49 +03:00
• 544d186012 Add the M486 check Alexander Popov 2025-10-26 00:36:08 +03:00
• 17366bcac6 Change the decision for the CFI_AUTO_DEFAULT check Alexander Popov 2025-10-25 20:30:37 +03:00