Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add support for x86_32, arm, and arm64 architectures #10

Closed
wants to merge 8 commits into from
Closed

Add support for x86_32, arm, and arm64 architectures #10

wants to merge 8 commits into from

Commits on Jan 17, 2019

  1. Update kspp-recommendations.config to look like an x86_64 config 

    Add a header that will make the checker script think that it is dealing
with a x86_64 config file. Additionally, update the stackprotector
related options to reflect the >= 4.18 names.

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
    @tyhicks
    tyhicks committed Jan 17, 2019
    Configuration menu
    Copy the full SHA
    0316ba5 View commit details
    Browse the repository at this point in the history

  2. Make the script aware of target architecture 

    Add the ability to parse the processor architecture from the config
file. The user can override the architecture with the -a. Additionally,
if the user wants to use the -p option to print the recommendations
without specifying a kernel config file, the -a option can be used to
print the recommendations that correspond to the specificied
architecture.

Some recommendations are architecture specific so we need to warn the
user if they're checking a kernel config for an architecture that
doesn't have any architecture specific recommendations.

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
    @tyhicks
    tyhicks committed Jan 17, 2019
    Configuration menu
    Copy the full SHA
    a456320 View commit details
    Browse the repository at this point in the history

  3. Add support for x86_32 

    Differentiate between 32 and 64 bit x86. This sometimes requires a
pre-parse of the kernel config in order to detect the sub-architecture
before constructing the checklist.

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
    @tyhicks
    tyhicks committed Jan 17, 2019
    Configuration menu
    Copy the full SHA
    4a7d419 View commit details
    Browse the repository at this point in the history

  4. Add support for arm and arm64 

    Check for ARM and ARM64 hardening options.

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
    @tyhicks
    tyhicks committed Jan 17, 2019
    Configuration menu
    Copy the full SHA
    32959dc View commit details
    Browse the repository at this point in the history

  5. Make KSPP recommendations config x86_64 specific 

    Rename the file so that it is clear that the recommendations are x86-64
specific.

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
    @tyhicks
    tyhicks committed Jan 17, 2019
    Configuration menu
    Copy the full SHA
    e4c976c View commit details
    Browse the repository at this point in the history

  6. Add a KSPP recommendations config for x86_32 

    Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
    @tyhicks
    tyhicks committed Jan 17, 2019
    Configuration menu
    Copy the full SHA
    9ca1a40 View commit details
    Browse the repository at this point in the history

  7. Add a KSPP recommendations config for arm 

    The arm section of the KSPP Recommended_Settings wiki page contains the
following lines:

 # If building an old out-of-tree Qualcomm kernel, this is similar to
 # CONFIG_STRICT_KERNEL_RWX.
 CONFIG_STRICT_MEMORY_RWX=y

Since this option only applies to an old out-of-tree Qualcomm kernel,
it is not included in the config file.

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
    @tyhicks
    tyhicks committed Jan 17, 2019
    Configuration menu
    Copy the full SHA
    0f3c54f View commit details
    Browse the repository at this point in the history

  8. Add a KSPP recommendations config for arm64 

    Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
    @tyhicks
    tyhicks committed Jan 17, 2019
    Configuration menu
    Copy the full SHA
    f790cf5 View commit details
    Browse the repository at this point in the history