Commit Graph

71 Commits

Author SHA1 Message Date
Stéphane Lesimple 6f1bdba1d9 bump to v0.18 to reflect changes 2018-01-09 09:21:42 +01:00
Stéphane Lesimple 7b05105a54
Merge pull request #25 from Feandil/proc_config
When using /proc/config.gz, indicate it more clearly
2018-01-09 09:19:36 +01:00
Stéphane Lesimple 8aed2d4086
Merge pull request #26 from Feandil/proc_kallsym
Use /proc/kallsyms to get symbols, if available
2018-01-09 09:17:18 +01:00
Vincent Brillault f4140a992a
Use /proc/kallsyms to get symbols, if available 2018-01-09 08:58:09 +01:00
Vincent Brillault 2c51b00a90
When using /proc/config.gz, indicate it more clearly 2018-01-09 08:54:07 +01:00
Stéphane Lesimple 2d94514c07 adding mention of heuristic for variant 1 check 2018-01-09 08:43:52 +01:00
Stéphane Lesimple 0e8f97afbc
Merge pull request #24 from angus-p/Remove-extra-space
remove superfluous space from test line 315
2018-01-09 08:34:10 +01:00
Stéphane Lesimple 70323a30da
Merge pull request #23 from mradcliffe/issue-22
Increases tmp directory uniqueness to 6 characters to support Slackware
2018-01-09 08:33:32 +01:00
angus-p cc0b325383
remove superfluous space from test line 315
Extra space was causing non-existent variable to be tested resulting in 'YES' if running in live mode and IBRS compiled in
2018-01-09 03:47:25 +00:00
Matthew Radcliffe 4454f03136 Increases tmp directory uniqueness to 6 characters to support Slackware 2018-01-08 22:28:55 -05:00
Stéphane Lesimple 949f316f89 missed version bump + README typofix 2018-01-08 23:15:42 +01:00
Stéphane Lesimple 5082afae61
Merge pull request #19 from speed47/offline_mode
implement offline mode and help
2018-01-08 23:13:19 +01:00
Stéphane Lesimple d73a24cb5b implement offline mode and help 2018-01-08 23:09:17 +01:00
Stéphane Lesimple 75332e6e0f
Merge pull request #18 from GrimKriegor/linux-libre_support
Linux-libre support
2018-01-08 23:07:41 +01:00
Grim Kriegor 2d33a4369e Linux-libre support 2018-01-08 21:56:11 +00:00
Stéphane Lesimple 8d4d295309 bump to v0.16 to reflect changes 2018-01-08 17:48:20 +01:00
Stéphane Lesimple 1ff437edbb
Merge pull request #16 from Alkorin/fixes
Fixes
2018-01-08 17:45:59 +01:00
Stéphane Lesimple 34656827f5 detect retpoline-compliant compiler from latest LKML patches 2018-01-08 17:32:19 +01:00
Alkorin 8c8a8d35fd Detect if 'readelf' is present 2018-01-08 16:52:09 +01:00
Alkorin debd10b517 Detect if 'strings' is present 2018-01-08 16:51:20 +01:00
Alkorin 21f81ff5c9 Detect if uncompress binaries are present 2018-01-08 16:51:14 +01:00
Stéphane Lesimple 206e4b7fbc add detection of retpoline-aware compiler 2018-01-08 16:28:00 +01:00
Alkorin 1a14483c98 Use 'readelf' instead of 'file' to detect kernel 2018-01-08 15:56:19 +01:00
Alkorin 26564206db Do not execute checks if we already found that PTI is enabled 2018-01-08 15:56:19 +01:00
Stéphane Lesimple 207168e097 detect if the used compiler supports retpoline (WIP) 2018-01-08 15:45:09 +01:00
Stéphane Lesimple f8ca11e56a
Merge pull request #12 from sebastianw/fix-double-print
Remove superfluous 'YES' output when checking cpuinfo
2018-01-08 15:05:15 +01:00
Sebastian Wiesinger c88acdd31d Remove superfluous 'YES' output when checking cpuinfo 2018-01-08 14:50:59 +01:00
Stéphane Lesimple 88df48f4a7
Merge pull request #11 from sebastianw/kaiser-cpu-flag
Recognize 'kaiser' flag in /proc/cpuinfo
2018-01-08 14:45:40 +01:00
Sebastian Wiesinger 124ce8e27a Recognize 'kaiser' flag in /proc/cpuinfo 2018-01-08 14:38:43 +01:00
Stéphane Lesimple 7bbcfe0df7
Merge pull request #7 from Feandil/redhat
Redhat support
2018-01-08 14:17:33 +01:00
Vincent Brillault a792348928
RedHat uses a different configuration name 2018-01-08 12:59:12 +01:00
Vincent Brillault 66f7708095
Refactor RedHat support:
- Isolate file check to different elif (allowing to add more)
- Do the PTI debugfs check first (faster and supposed to be dynamic)
- If pti_enable is 0, don't trust dmesg (supposed to be dynamic)
2018-01-08 12:59:03 +01:00
Vincent Brillault 34ef5ef21b
Delay umount (for RedHat access to pti_enable) 2018-01-08 12:58:22 +01:00
Stéphane Lesimple edbdf0da1f push the lfence opcodes threshold to 70 2018-01-08 12:49:23 +01:00
Stéphane Lesimple 68adbfdf14
Merge pull request #10 from Alkorin/permissionDenied
Avoid 'cat: /sys/kernel/debug/x86/pti_enabled: Permission denied'
2018-01-08 12:44:09 +01:00
Alkorin 47c30babf1 Avoid 'cat: /sys/kernel/debug/x86/pti_enabled: Permission denied' 2018-01-08 12:41:28 +01:00
Stéphane Lesimple ef7a5c4cf6 adding uname -v to get potential additional vendor information 2018-01-08 12:22:56 +01:00
Stéphane Lesimple 4406910bea
Merge pull request #8 from Feandil/debugfs
Fix debugfs mount check
2018-01-08 12:19:23 +01:00
Vincent Brillault b7197d6f54
Fix debugfs mount check 2018-01-08 12:15:51 +01:00
Stéphane Lesimple c792fa35bf add kernel version information to the output 2018-01-08 12:14:12 +01:00
Stéphane Lesimple d1498fe03f
Merge pull request #5 from fccagou/centos
fix(centos): check according to redhat patch.
2018-01-08 12:10:07 +01:00
Stéphane Lesimple 12bdd0e412 root check is now more visible 2018-01-08 11:31:19 +01:00
Stéphane Lesimple 89f9bef577
Merge pull request #4 from dguglielmi/add-genkernel-support
Add support for Gentoo genkernel image path
2018-01-08 11:24:07 +01:00
fccagou 0f50e04dab fix(centos): check according to redhat patch. https://access.redhat.com/articles/3311301 2018-01-08 11:14:22 +01:00
David Guglielmi bf056ae73d Add support for Gentoo genkernel image path 2018-01-08 11:08:53 +01:00
Stéphane Lesimple 623e180ae1
Merge pull request #3 from TheHendla/arch_boot_img
add arch linux bootimage path
2018-01-08 10:51:59 +01:00
Frederik Schreiber 40a9d43c44 add arch linux bootimage path 2018-01-08 10:36:29 +01:00
Stéphane Lesimple c1004d5171 fix extract-vmlinux for non-gzip 2018-01-08 09:56:29 +01:00
Stéphane Lesimple fa0850466e add some comments, enhance pti detection 2018-01-08 09:37:54 +01:00
Stéphane Lesimple 5c14384e15
Merge pull request #1 from t-nelis/root-check
Improve "running as root" check
2018-01-08 08:58:21 +01:00