c483a2cf60
check spec_ctrl support using cpuid
2018-01-14 15:47:51 +01:00
dead0054a4
fix: proper detail msg in vuln status
2018-01-14 15:47:22 +01:00
8ed7d465aa
Merge pull request #77 from speed47/exitcode
...
proper return codes regardless of the batch mode
2018-01-14 14:25:12 +01:00
e5e4851d72
proper return codes regardless of the batch mode
2018-01-14 14:24:31 +01:00
7f92717a2c
add info about accuracy when missing kernel files
2018-01-13 13:59:17 +01:00
b47d505689
AMD now vuln to variant2 (as per their stmt)
v0.29
2018-01-13 13:35:31 +01:00
4a2d051285
minor is_cpu_vulnerable() changes ( #71 )
...
* correct is_cpu_vulnerable() comment
As far as I can tell, the function and usage are correct for the comment
to be inverted.
Add a clarifying note as to why the value choice makes sense.
* exit on invalid varient
If this happens, it's a bug in the script. None of the calling code
checks for status 255, so don't let a scripting bug cause a false
negative.
* no need to set vulnerable CPUs
According to comment above this code:
'by default, everything is vulnerable, we work in a "whitelist" logic here.'
2018-01-13 13:16:37 +01:00
f3551b9734
Only show the name of the script, not the full path ( #72 )
2018-01-13 13:14:19 +01:00
45b98e125f
fix some typos ( #73 )
2018-01-13 13:13:40 +01:00
dce917bfbb
add --version, bump to v0.28
v0.28
2018-01-12 19:10:44 +01:00
8f18f53aba
add cpu model in output
2018-01-12 19:08:12 +01:00
d3f102b3b3
Typofix in readme ( #61 )
2018-01-12 13:58:04 +01:00
8bd093173d
Fixed a few spelling errors ( #60 )
2018-01-12 11:46:36 +01:00
bfe5a3b840
add some debug
2018-01-12 10:53:19 +01:00
6a0242eea3
bump to v0.27
v0.27
2018-01-11 15:36:41 +01:00
bc4e39038a
fix(opcodes): fix regression introduced in previous commit
...
We were saying unknown instead of vulnerable when the count of lfence opcodes was low
This was not impacting batch mode or the final decision, just the human-readable output of the script.
2018-01-11 15:35:57 +01:00
62f8ed6f61
adding support for new /sys interface ( #55 )
...
* adding support for new /sys interface
* fix(objdump): prefer -d instead of -D, some kernels crash objdump otherwise
v0.26
2018-01-11 12:23:16 +01:00
56b67f8082
Typo in README ( #54 )
2018-01-11 12:01:31 +01:00
52a8f78885
send warning to stderr. ( #53 )
...
With --batch json there must not be any other output on stdout, so redirect warnings to stderr will show the warning on the console and only the json output is on stdout.
2018-01-11 09:55:43 +01:00
a09a5ba38f
bump to v0.25 to reflect changes
v0.25
2018-01-11 09:08:29 +01:00
5a7d8d7edf
Produce JSON output formatted for Puppet, Ansible, Chef... ( #50 )
...
Produce JSON output formatted for Puppet, Ansible, Chef...
2018-01-11 09:04:13 +01:00
49fdc6c449
Merge pull request #51 from cowanml/file_read_check_fixup
...
fixed file read test
2018-01-10 21:39:09 +01:00
af3de2a862
fixed file read test
2018-01-10 15:17:14 -05:00
c6e1b0ac8a
feat(kernel): add support for LZ4 decompression
v0.24
2018-01-10 20:10:57 +01:00
b913dacc1b
Merge pull request #48 from speed47/opensuse
...
fix(opensuse): add specific location for ibrs_enabled file
2018-01-10 18:41:30 +01:00
eb0ebef5a8
fix(opensuse): add specific location for ibrs_enabled file
2018-01-10 17:40:33 +01:00
e0254025e8
Merge pull request #47 from speed47/readme
...
update readme
2018-01-10 17:12:54 +01:00
bd010340e6
update readme
2018-01-10 17:12:33 +01:00
a658de2f01
fix(kernel): fix detection for separate /boot partitions
2018-01-10 16:27:16 +01:00
4aed5589fe
Merge pull request #44 from speed47/bootimage
...
feat(kernel): check the BOOT_IMAGE info from cmdline before trying th…
2018-01-10 16:13:00 +01:00
8ed1f5e3af
feat(kernel): check the BOOT_IMAGE info from cmdline before trying the default names
2018-01-10 15:46:29 +01:00
ffc542eb82
bump to v0.23 to reflect changes
v0.23
2018-01-10 15:25:55 +01:00
74bc7ba637
add --variant to specify what check we want to run
v0.22
2018-01-10 15:22:30 +01:00
5389ac6844
Merge pull request #41 from bang-communications/master
...
NRPE mode
2018-01-10 15:11:45 +01:00
36fb83215a
Merge pull request #42 from simon-vasseur/style
...
added some style (screenshot in readme)
2018-01-10 15:07:34 +01:00
59fe8c2ad8
Error on unknown batch format
2018-01-10 13:57:10 +00:00
b8d28e7f61
added some style
2018-01-10 14:55:58 +01:00
7c11d07865
Stray tab
2018-01-10 11:59:33 +00:00
7c5cfbb8c3
batch nrpe
2018-01-10 11:57:45 +00:00
381038eceb
NRPE mode
2018-01-10 11:18:45 +00:00
d6e4aa43f0
Merge pull request #37 from deufrai/better-dmesg-support
...
Improve PTI detection
2018-01-09 19:52:45 +01:00
e5e09384f0
typofix
2018-01-09 18:54:35 +01:00
7222367f04
add disclaimer and bump to 0.21
v0.21
2018-01-09 18:52:21 +01:00
ab512687cf
Merge pull request #38 from Alkorin/fixARM
...
Fix ARM checks
2018-01-09 18:47:25 +01:00
a5aaa790a0
Merge pull request #39 from Alkorin/typo
...
Fix small typo in error message
2018-01-09 18:45:58 +01:00
335439dee0
Fix small typo in error message
2018-01-09 18:44:15 +01:00
45297b6f7d
Fix ARM checks
2018-01-09 18:41:48 +01:00
a7b14306d5
Improve PTI detection even more
...
when PTI detection relies on dmesg, dmesg output is checked first
then /var/log/dmesg if dmesg output lacks boot time messages
2018-01-09 18:26:32 +01:00
608952ff71
Improve PTI detection
...
In case of a busy or misconfigured server, kernel message buffer loop
can be filled with messages broadcasted later than boot time. So dmesg
command wont return boot time messages.
Grepping /var/log/dmesg fixes it and this log file location semms pretty
standard across many common distros
2018-01-09 18:17:39 +01:00
1c3d349667
Merge pull request #31 from Feandil/batch
...
Add a "batch" and "verbose" mode
2018-01-09 18:12:39 +01:00