Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						2d94514c07 
					 
					
						
						
							
							adding mention of heuristic for variant 1 check  
						
						
						
						
							
						
					 
					
						2018-01-09 08:43:52 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						0e8f97afbc 
					 
					
						
						
							
							Merge pull request  #24  from angus-p/Remove-extra-space  
						
						... 
						
						
						
						remove superfluous space from test line 315 
						
						
							
						
					 
					
						2018-01-09 08:34:10 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						70323a30da 
					 
					
						
						
							
							Merge pull request  #23  from mradcliffe/issue-22  
						
						... 
						
						
						
						Increases tmp directory uniqueness to 6 characters to support Slackware 
						
						
							
						
					 
					
						2018-01-09 08:33:32 +01:00 
						 
				 
			
				
					
						
							
							
								angus-p 
							
						 
					 
					
						
						
							
						
						cc0b325383 
					 
					
						
						
							
							remove superfluous space from test line 315  
						
						... 
						
						
						
						Extra space was causing non-existent variable to be tested resulting in 'YES' if running in live mode and IBRS compiled in 
						
						
							
						
					 
					
						2018-01-09 03:47:25 +00:00 
						 
				 
			
				
					
						
							
							
								Matthew Radcliffe 
							
						 
					 
					
						
						
							
						
						4454f03136 
					 
					
						
						
							
							Increases tmp directory uniqueness to 6 characters to support Slackware  
						
						
						
						
							
						
					 
					
						2018-01-08 22:28:55 -05:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						949f316f89 
					 
					
						
						
							
							missed version bump + README typofix  
						
						
						
						
							
 
						
					 
					
						2018-01-08 23:15:42 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						5082afae61 
					 
					
						
						
							
							Merge pull request  #19  from speed47/offline_mode  
						
						... 
						
						
						
						implement offline mode and help 
						
						
							
						
					 
					
						2018-01-08 23:13:19 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						d73a24cb5b 
					 
					
						
						
							
							implement offline mode and help  
						
						
						
						
							
						
					 
					
						2018-01-08 23:09:17 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						75332e6e0f 
					 
					
						
						
							
							Merge pull request  #18  from GrimKriegor/linux-libre_support  
						
						... 
						
						
						
						Linux-libre support 
						
						
							
						
					 
					
						2018-01-08 23:07:41 +01:00 
						 
				 
			
				
					
						
							
							
								Grim Kriegor 
							
						 
					 
					
						
						
							
						
						2d33a4369e 
					 
					
						
						
							
							Linux-libre support  
						
						
						
						
							
						
					 
					
						2018-01-08 21:56:11 +00:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						8d4d295309 
					 
					
						
						
							
							bump to v0.16 to reflect changes  
						
						
						
						
							
 
						
					 
					
						2018-01-08 17:48:20 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						1ff437edbb 
					 
					
						
						
							
							Merge pull request  #16  from Alkorin/fixes  
						
						... 
						
						
						
						Fixes 
						
						
							
						
					 
					
						2018-01-08 17:45:59 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						34656827f5 
					 
					
						
						
							
							detect retpoline-compliant compiler from latest LKML patches  
						
						
						
						
							
 
						
					 
					
						2018-01-08 17:32:19 +01:00 
						 
				 
			
				
					
						
							
							
								Alkorin 
							
						 
					 
					
						
						
							
						
						8c8a8d35fd 
					 
					
						
						
							
							Detect if 'readelf' is present  
						
						
						
						
							
						
					 
					
						2018-01-08 16:52:09 +01:00 
						 
				 
			
				
					
						
							
							
								Alkorin 
							
						 
					 
					
						
						
							
						
						debd10b517 
					 
					
						
						
							
							Detect if 'strings' is present  
						
						
						
						
							
						
					 
					
						2018-01-08 16:51:20 +01:00 
						 
				 
			
				
					
						
							
							
								Alkorin 
							
						 
					 
					
						
						
							
						
						21f81ff5c9 
					 
					
						
						
							
							Detect if uncompress binaries are present  
						
						
						
						
							
						
					 
					
						2018-01-08 16:51:14 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						206e4b7fbc 
					 
					
						
						
							
							add detection of retpoline-aware compiler  
						
						
						
						
							
 
						
					 
					
						2018-01-08 16:28:00 +01:00 
						 
				 
			
				
					
						
							
							
								Alkorin 
							
						 
					 
					
						
						
							
						
						1a14483c98 
					 
					
						
						
							
							Use 'readelf' instead of 'file' to detect kernel  
						
						
						
						
							
						
					 
					
						2018-01-08 15:56:19 +01:00 
						 
				 
			
				
					
						
							
							
								Alkorin 
							
						 
					 
					
						
						
							
						
						26564206db 
					 
					
						
						
							
							Do not execute checks if we already found that PTI is enabled  
						
						
						
						
							
						
					 
					
						2018-01-08 15:56:19 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						207168e097 
					 
					
						
						
							
							detect if the used compiler supports retpoline (WIP)  
						
						
						
						
							
						
					 
					
						2018-01-08 15:45:09 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						f8ca11e56a 
					 
					
						
						
							
							Merge pull request  #12  from sebastianw/fix-double-print  
						
						... 
						
						
						
						Remove superfluous 'YES' output when checking cpuinfo 
						
						
							
						
					 
					
						2018-01-08 15:05:15 +01:00 
						 
				 
			
				
					
						
							
							
								Sebastian Wiesinger 
							
						 
					 
					
						
						
							
						
						c88acdd31d 
					 
					
						
						
							
							Remove superfluous 'YES' output when checking cpuinfo  
						
						
						
						
							
						
					 
					
						2018-01-08 14:50:59 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						88df48f4a7 
					 
					
						
						
							
							Merge pull request  #11  from sebastianw/kaiser-cpu-flag  
						
						... 
						
						
						
						Recognize 'kaiser' flag in /proc/cpuinfo 
						
						
							
						
					 
					
						2018-01-08 14:45:40 +01:00 
						 
				 
			
				
					
						
							
							
								Sebastian Wiesinger 
							
						 
					 
					
						
						
							
						
						124ce8e27a 
					 
					
						
						
							
							Recognize 'kaiser' flag in /proc/cpuinfo  
						
						
						
						
							
						
					 
					
						2018-01-08 14:38:43 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						7bbcfe0df7 
					 
					
						
						
							
							Merge pull request  #7  from Feandil/redhat  
						
						... 
						
						
						
						Redhat support 
						
						
							
						
					 
					
						2018-01-08 14:17:33 +01:00 
						 
				 
			
				
					
						
							
							
								Vincent Brillault 
							
						 
					 
					
						
						
							
						
						a792348928 
					 
					
						
						
							
							RedHat uses a different configuration name  
						
						
						
						
							
						
					 
					
						2018-01-08 12:59:12 +01:00 
						 
				 
			
				
					
						
							
							
								Vincent Brillault 
							
						 
					 
					
						
						
							
						
						66f7708095 
					 
					
						
						
							
							Refactor RedHat support:  
						
						... 
						
						
						
						- Isolate file check to different elif (allowing to add more)
- Do the PTI debugfs check first (faster and supposed to be dynamic)
- If pti_enable is 0, don't trust dmesg (supposed to be dynamic) 
						
						
							
						
					 
					
						2018-01-08 12:59:03 +01:00 
						 
				 
			
				
					
						
							
							
								Vincent Brillault 
							
						 
					 
					
						
						
							
						
						34ef5ef21b 
					 
					
						
						
							
							Delay umount (for RedHat access to pti_enable)  
						
						
						
						
							
						
					 
					
						2018-01-08 12:58:22 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						edbdf0da1f 
					 
					
						
						
							
							push the lfence opcodes threshold to 70  
						
						
						
						
							
 
						
					 
					
						2018-01-08 12:49:23 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						68adbfdf14 
					 
					
						
						
							
							Merge pull request  #10  from Alkorin/permissionDenied  
						
						... 
						
						
						
						Avoid 'cat: /sys/kernel/debug/x86/pti_enabled: Permission denied' 
						
						
							
						
					 
					
						2018-01-08 12:44:09 +01:00 
						 
				 
			
				
					
						
							
							
								Alkorin 
							
						 
					 
					
						
						
							
						
						47c30babf1 
					 
					
						
						
							
							Avoid 'cat: /sys/kernel/debug/x86/pti_enabled: Permission denied'  
						
						
						
						
							
						
					 
					
						2018-01-08 12:41:28 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						ef7a5c4cf6 
					 
					
						
						
							
							adding uname -v to get potential additional vendor information  
						
						
						
						
							
						
					 
					
						2018-01-08 12:22:56 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						4406910bea 
					 
					
						
						
							
							Merge pull request  #8  from Feandil/debugfs  
						
						... 
						
						
						
						Fix debugfs mount check 
						
						
							
						
					 
					
						2018-01-08 12:19:23 +01:00 
						 
				 
			
				
					
						
							
							
								Vincent Brillault 
							
						 
					 
					
						
						
							
						
						b7197d6f54 
					 
					
						
						
							
							Fix debugfs mount check  
						
						
						
						
							
						
					 
					
						2018-01-08 12:15:51 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						c792fa35bf 
					 
					
						
						
							
							add kernel version information to the output  
						
						
						
						
							
 
						
					 
					
						2018-01-08 12:14:12 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						d1498fe03f 
					 
					
						
						
							
							Merge pull request  #5  from fccagou/centos  
						
						... 
						
						
						
						fix(centos): check according to redhat patch. 
						
						
							
						
					 
					
						2018-01-08 12:10:07 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						12bdd0e412 
					 
					
						
						
							
							root check is now more visible  
						
						
						
						
							
 
						
					 
					
						2018-01-08 11:31:19 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						89f9bef577 
					 
					
						
						
							
							Merge pull request  #4  from dguglielmi/add-genkernel-support  
						
						... 
						
						
						
						Add support for Gentoo genkernel image path 
						
						
							
						
					 
					
						2018-01-08 11:24:07 +01:00 
						 
				 
			
				
					
						
							
							
								fccagou 
							
						 
					 
					
						
						
							
						
						0f50e04dab 
					 
					
						
						
							
							fix(centos): check according to redhat patch.  https://access.redhat.com/articles/3311301  
						
						
						
						
							
						
					 
					
						2018-01-08 11:14:22 +01:00 
						 
				 
			
				
					
						
							
							
								David Guglielmi 
							
						 
					 
					
						
						
							
						
						bf056ae73d 
					 
					
						
						
							
							Add support for Gentoo genkernel image path  
						
						
						
						
							
						
					 
					
						2018-01-08 11:08:53 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						623e180ae1 
					 
					
						
						
							
							Merge pull request  #3  from TheHendla/arch_boot_img  
						
						... 
						
						
						
						add arch linux bootimage path 
						
						
							
						
					 
					
						2018-01-08 10:51:59 +01:00 
						 
				 
			
				
					
						
							
							
								Frederik Schreiber 
							
						 
					 
					
						
						
							
						
						40a9d43c44 
					 
					
						
						
							
							add arch linux bootimage path  
						
						
						
						
							
						
					 
					
						2018-01-08 10:36:29 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						c1004d5171 
					 
					
						
						
							
							fix extract-vmlinux for non-gzip  
						
						
						
						
							
 
						
					 
					
						2018-01-08 09:56:29 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						fa0850466e 
					 
					
						
						
							
							add some comments, enhance pti detection  
						
						
						
						
							
						
					 
					
						2018-01-08 09:37:54 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						5c14384e15 
					 
					
						
						
							
							Merge pull request  #1  from t-nelis/root-check  
						
						... 
						
						
						
						Improve "running as root" check 
						
						
							
						
					 
					
						2018-01-08 08:58:21 +01:00 
						 
				 
			
				
					
						
							
							
								Thibault Nélis 
							
						 
					 
					
						
						
							
						
						1aaca63dcf 
					 
					
						
						
							
							Improve "running as root" check  
						
						... 
						
						
						
						Small issue with the USER environment variable:
  $ echo $USER
  thib
  $ sudo sh -c 'echo $USER'
  thib
  $ sudo -i sh -c 'echo $USER'
  root
Rather than recommending users to use sudo --login / -i, use the (very
widespread/portable) id program to retrieve the effective user ID
instead and don't change the recommendation.
  $ id -u
  1000
  $ sudo id -u
  0
  $ sudo -i id -u
  0 
						
						
							
						
					 
					
						2018-01-08 01:22:14 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						96dfa03c00 
					 
					
						
						
							
							fix for uncompressed vmlinux case  
						
						
						
						
							
 
						
					 
					
						2018-01-08 00:45:12 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						05c79425ab 
					 
					
						
						
							
							detect kpti directly in vmlinux if option is not there  
						
						
						
						
							
 
						
					 
					
						2018-01-07 22:47:41 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						9def0c949a 
					 
					
						
						
							
							update readme  
						
						
						
						
							
						
					 
					
						2018-01-07 20:13:10 +01:00 
						 
				 
			
				
					
						
							
							
								Stéphane Lesimple 
							
						 
					 
					
						
						
							
						
						64eb1d005c 
					 
					
						
						
							
							add couple missing elses  
						
						
						
						
							
 
						
					 
					
						2018-01-07 18:49:15 +01:00