{"push_id":2703469957,"size":11,"distinct_size":11,"ref":"refs/heads/feature/improvements","head":"f803b76c9d73e86f6a8d42f235bc5936208c000b","before":"3786935fa23fa03fa530bf8d9792b07f3e8908dd","commits":[{"sha":"60818a26c78bac5e34521b9bb0787d3bfde7684d","author":{"name":"Alexander Popov","email":"71451045b2a052d98f871b4d58b124c139833139@linux.com"},"message":"Add Oracle Unbreakable Enterprise Kernel 5 (UEK-5) config","distinct":true,"url":"https://api.github.com/repos/anthraxx/kconfig-hardened-check/commits/60818a26c78bac5e34521b9bb0787d3bfde7684d"},{"sha":"f58e98ef1d6ab91602b688565daf98633855439d","author":{"name":"Alexander Popov","email":"71451045b2a052d98f871b4d58b124c139833139@linux.com"},"message":"More decisions on kernel options","distinct":true,"url":"https://api.github.com/repos/anthraxx/kconfig-hardened-check/commits/f58e98ef1d6ab91602b688565daf98633855439d"},{"sha":"3ae203a86ebd069df6968752b2426773697b9c17","author":{"name":"Alexander Popov","email":"71451045b2a052d98f871b4d58b124c139833139@linux.com"},"message":"Move some features to 'cut_attack_surface' category\n\nSTRICT_DEVMEM and IO_STRICT_DEVMEM, SECCOMP and SECCOMP_FILTER\nare not self protection features. They cut attack surface.\n\nI'm also not sure about SYN_COOKIES. Mark it with a comment.","distinct":true,"url":"https://api.github.com/repos/anthraxx/kconfig-hardened-check/commits/3ae203a86ebd069df6968752b2426773697b9c17"},{"sha":"995c93f8092cc1e28143742c87fc6600da1d96f5","author":{"name":"Alexander Popov","email":"71451045b2a052d98f871b4d58b124c139833139@linux.com"},"message":"Add rules for options disabled by grsecurity\n\nCarefully extracted from their last public patch","distinct":true,"url":"https://api.github.com/repos/anthraxx/kconfig-hardened-check/commits/995c93f8092cc1e28143742c87fc6600da1d96f5"},{"sha":"a2b319a34868461ad29199c791e31ec0b2d896d7","author":{"name":"Alexander Popov","email":"71451045b2a052d98f871b4d58b124c139833139@linux.com"},"message":"Consider 'not found' as an equivalent of 'is not set'","distinct":true,"url":"https://api.github.com/repos/anthraxx/kconfig-hardened-check/commits/a2b319a34868461ad29199c791e31ec0b2d896d7"},{"sha":"23836666a5d7cf423fcbba146beb830e1c83fbe3","author":{"name":"anthraxx","email":"bfe9c09a46c4caeed56053d26bf5c0fb0a5a4e36@leventepolyak.net"},"message":"improve architecture in preparation for new features\n\nThis improves the opt storage using a kconfig key based dict to\navoid looping through all opts to get a certain entry by allowing\nkey based lookups.","distinct":true,"url":"https://api.github.com/repos/anthraxx/kconfig-hardened-check/commits/23836666a5d7cf423fcbba146beb830e1c83fbe3"},{"sha":"14e8983ee8d75dd2ba14521cb40d4b033753e2c1","author":{"name":"anthraxx","email":"bfe9c09a46c4caeed56053d26bf5c0fb0a5a4e36@leventepolyak.net"},"message":"argparse: using python module instead of manual getopt","distinct":true,"url":"https://api.github.com/repos/anthraxx/kconfig-hardened-check/commits/14e8983ee8d75dd2ba14521cb40d4b033753e2c1"},{"sha":"d97b6cd0152a95fe08144492c6eca0217050b8d5","author":{"name":"anthraxx","email":"bfe9c09a46c4caeed56053d26bf5c0fb0a5a4e36@leventepolyak.net"},"message":"support logical or operations on options\n\nThe OR class implementation supports combining Opt's logically\nwith an or-operator. If any of the Opt's provided to the OR class\nreturns True, the check is considered OK.\n\nFixes #1","distinct":true,"url":"https://api.github.com/repos/anthraxx/kconfig-hardened-check/commits/d97b6cd0152a95fe08144492c6eca0217050b8d5"},{"sha":"4fb0d6122afaff5049060649f802c0200865f407","author":{"name":"anthraxx","email":"bfe9c09a46c4caeed56053d26bf5c0fb0a5a4e36@leventepolyak.net"},"message":"support DEVMEM not set when considering STRICT_DEVMEM/IO_STRICT_DEVMEM\n\nDetect STRICT_DEVMEM and IO_STRICT_DEVMEM as not being needed whenever\nDEVMEM is not set.","distinct":true,"url":"https://api.github.com/repos/anthraxx/kconfig-hardened-check/commits/4fb0d6122afaff5049060649f802c0200865f407"},{"sha":"879cf2e3173a3eecefb12f7c88a5bfc6fb6b5d9e","author":{"name":"anthraxx","email":"bfe9c09a46c4caeed56053d26bf5c0fb0a5a4e36@leventepolyak.net"},"message":"support STACKPROTECTOR_STRONG besides CC_STACKPROTECTOR_STRONG\n\nCC_STACKPROTECTOR_STRONG will be replaced by STACKPROTECTOR_STRONG\nin 4.18, expect any of the both options to support all versions.","distinct":true,"url":"https://api.github.com/repos/anthraxx/kconfig-hardened-check/commits/879cf2e3173a3eecefb12f7c88a5bfc6fb6b5d9e"},{"sha":"f803b76c9d73e86f6a8d42f235bc5936208c000b","author":{"name":"anthraxx","email":"bfe9c09a46c4caeed56053d26bf5c0fb0a5a4e36@leventepolyak.net"},"message":"support logical AND operations on option checks\n\nThis can freely be combined with the OR-operator to achieve more\ncomplex checks f.e. required for some MODULES conditions.","distinct":true,"url":"https://api.github.com/repos/anthraxx/kconfig-hardened-check/commits/f803b76c9d73e86f6a8d42f235bc5936208c000b"}]}
{"actor":{"display_login":"anthraxx"}}