kconfig-hardened-check icon indicating copy to clipboard operation
kconfig-hardened-check copied to clipboard

Published 20 hours ago • verified publisher icon a13xp0p0v

2 Checks Recommended by Timesys Hardening Guide CONFIG_DEBUG_BUGVERBOSE & CONFIG_ZSMALLOC

Open wryMitts opened this issue 1 month ago • 1 comments

Found here: https://timesys.com/pdf/Timesys-kernel-hardening-guide.pdf Dated 2022 https://web.archive.org/web/20241227042743/https://timesys.com/pdf/Timesys-kernel-hardening-guide.pdf

This seems useful for the project: DEBUG_BUGVERBOSE=is not set

Make sure this is not enabled, as it could provide an attacker sensitive kernel backtrace information on BUG() conditions

Not sure on this one?: ZSMALLOC=is not set

Do not enable memory allocator for compressed pages (slab-based memory allocator designed to store compressed RAM pages via virtual memory mapping

wryMitts avatar Dec 27 '24 04:12 wryMitts