User contributions
Jump to navigation
Jump to search
- 22:22, 26 April 2024 diff hist +44 Kernel Self Protection Project/Recommended Settings →CONFIGs: CONFIG_SECURITY_SELINUX_DEBUG current
- 21:54, 26 April 2024 diff hist +39 Kernel Self Protection Project/Recommended Settings →CONFIGs: CONFIG_MODULE_FORCE_LOAD
- 21:53, 26 April 2024 diff hist +223 Kernel Self Protection Project/Recommended Settings →sysctls: kernel.modules_disabled
- 21:50, 26 April 2024 diff hist +50 m Kernel Self Protection Project/Recommended Settings →CONFIGs
- 21:49, 26 April 2024 diff hist +37 m Kernel Self Protection Project/Recommended Settings →kernel command line options
- 21:49, 26 April 2024 diff hist +156 Kernel Self Protection Project/Recommended Settings →CONFIGs: CONFIG_SLAB_MERGE_DEFAULT
- 21:46, 26 April 2024 diff hist +35 Kernel Self Protection Project/Recommended Settings →CONFIGs: CONFIG_KFENCE_SAMPLE_INTERVAL
- 21:44, 26 April 2024 diff hist +98 m Kernel Self Protection Project/Recommended Settings →sysctls
- 21:42, 26 April 2024 diff hist +130 Kernel Self Protection Project/Recommended Settings →sysctls: warn_limit and oops_limit
- 21:31, 26 April 2024 diff hist +5 Kernel Self Protection Project/Recommended Settings →sysctls: update comment for randomize_va_space
- 21:29, 26 April 2024 diff hist +96 Kernel Self Protection Project/Recommended Settings →arm64: CONFIG_UNWIND_PATCH_PAC_INTO_SCS
- 21:17, 26 April 2024 diff hist +81 Kernel Self Protection Project/Recommended Settings →x86_64: CONFIG_FINEIBT
- 21:15, 26 April 2024 diff hist +96 Kernel Self Protection Project/Recommended Settings →x86_64: CONFIG_X86_KERNEL_IBT
- 21:10, 26 April 2024 diff hist −11 Kernel Self Protection Project/Recommended Settings →sysctls: clarify userfaultfd, fix typo
- 21:08, 26 April 2024 diff hist +177 Kernel Self Protection Project/Recommended Settings →CONFIGs: CONFIG_MAGIC_SYSRQ_DEFAULT_ENABLE
- 21:02, 26 April 2024 diff hist +24 Kernel Self Protection Project/Recommended Settings →CONFIGs: CONFIG_LIST_HARDENED
- 21:01, 26 April 2024 diff hist +32 Kernel Self Protection Project/Recommended Settings →CONFIGs: CONFIG_RANDOM_KMALLOC_CACHES
- 21:00, 26 April 2024 diff hist +14 m Kernel Self Protection Project/Recommended Settings →CONFIGs
- 20:58, 26 April 2024 diff hist +72 Kernel Self Protection Project/Recommended Settings →x86_64: CONFIG_X86_USER_SHADOW_STACK
- 20:57, 26 April 2024 diff hist +111 Kernel Self Protection Project/Recommended Settings →CONFIGs: CONFIG_PAGE_TABLE_CHECK
- 19:04, 20 October 2023 diff hist +4 Kernel Self Protection Project/Recommended Settings Update kernel hardening checker URL (and name).
- 19:03, 20 October 2023 diff hist +145 Kernel Self Protection Project/Recommended Settings →CONFIGs
- 18:51, 20 October 2023 diff hist −19 Kernel Self Protection Project/Recommended Settings →kernel command line options
- 18:50, 20 October 2023 diff hist +89 Kernel Self Protection Project/Recommended Settings →CONFIGs
- 18:48, 20 October 2023 diff hist −1 m Kernel Self Protection Project/Recommended Settings →x86_64: typo noticed by Alexander Popov
- 23:09, 30 September 2023 diff hist +921 Kernel Self Protection Project/Recommended Settings →sysctls: From Alexander Popov: lock down things even harder.
- 22:55, 30 September 2023 diff hist +127 Kernel Self Protection Project/Recommended Settings →kernel command line options: From Alexander Popov, adding options for maybe missing CONFIGs
- 22:45, 30 September 2023 diff hist +11 m Kernel Self Protection Project/Recommended Settings →kernel command line options
- 22:44, 30 September 2023 diff hist +105 Kernel Self Protection Project/Recommended Settings →kernel command line options: From Alexander Popov: enable page shuffling in case CONFIG is unset.
- 22:42, 30 September 2023 diff hist +97 Kernel Self Protection Project/Recommended Settings →kernel command line options: From Alexander Popov: disable smt when needed
- 22:38, 30 September 2023 diff hist +45 Kernel Self Protection Project/Recommended Settings →x86_64: compile out vsyscall by default
- 00:31, 10 February 2023 diff hist +26 m Kernel Self Protection Project/Get Involved add TZ to calendar link current
- 19:46, 25 January 2023 diff hist 0 Kernel Self Protection Project/Get Involved
- 19:45, 25 January 2023 diff hist +223 Kernel Self Protection Project/Get Involved add calendar
- 22:50, 1 November 2022 diff hist +37 Kernel Self Protection Project/Recommended Settings →x86_64
- 22:50, 1 November 2022 diff hist +88 Kernel Self Protection Project/Recommended Settings →arm64
- 22:48, 1 November 2022 diff hist +33 Kernel Self Protection Project/Recommended Settings →x86_64
- 16:50, 28 October 2022 diff hist +56 Kernel Self Protection Project →Principles current
- 03:17, 15 October 2022 diff hist +102 Kernel Self Protection Project/Recommended Settings →sysctls
- 03:16, 15 October 2022 diff hist +102 Kernel Self Protection Project/Recommended Settings →CONFIGs
- 02:25, 14 October 2022 diff hist +97 Kernel Self Protection Project/Recommended Settings →x86_32: iommu
- 15:17, 13 October 2022 diff hist +375 Kernel Self Protection Project/Recommended Settings →CONFIGs
- 14:49, 13 October 2022 diff hist +104 Kernel Self Protection Project/Recommended Settings →x86_64: CFI
- 20:12, 11 October 2022 diff hist +19 Kernel Self Protection Project/Recommended Settings →CONFIGs
- 03:00, 10 October 2022 diff hist +67 Kernel Self Protection Project/Recommended Settings →CONFIGs: Alexander recommendation
- 02:58, 10 October 2022 diff hist +45 Kernel Self Protection Project/Recommended Settings →x86_64
- 02:57, 10 October 2022 diff hist +568 Kernel Self Protection Project/Recommended Settings →arm64: arm64 CFI and things, thanks to Alexander for the ping
- 02:41, 10 October 2022 diff hist +740 Kernel Self Protection Project/Recommended Settings →CONFIGs: next chunk from Alexander. RNG trust source setting are my recommendation, though.
- 02:29, 10 October 2022 diff hist +944 Kernel Self Protection Project/Recommended Settings →CONFIGs: add settings for recent kernels, thanks to Alexander Popov for the prodding and specific suggestions.
- 21:56, 19 August 2022 diff hist +240 Kernel Self Protection Project/Recommended Settings →CONFIGs: add note about Landlock thanks to Mickaël Salaün