API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Sep 3rd, 2018
366
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.02 KB | None | 0 0
raw download clone embed print report
  1. [+] Checking "config" against hardening preferences...
  2. option name | desired val | decision | reason || check result
  3. ===================================================================================================================
  4. CONFIG_BUG | y | ubuntu18 | self_protection || OK
  5. CONFIG_PAGE_TABLE_ISOLATION | y | ubuntu18 | self_protection || FAIL: not found
  6. CONFIG_RETPOLINE | y | ubuntu18 | self_protection || FAIL: not found
  7. CONFIG_X86_64 | y | ubuntu18 | self_protection || FAIL: not found
  8. CONFIG_STRICT_KERNEL_RWX | y | ubuntu18 | self_protection || OK
  9. CONFIG_DEBUG_WX | y | ubuntu18 | self_protection || FAIL: not found
  10. CONFIG_RANDOMIZE_BASE | y | ubuntu18 | self_protection || FAIL: not found
  11. CONFIG_RANDOMIZE_MEMORY | y | ubuntu18 | self_protection || FAIL: not found
  12. CONFIG_STACKPROTECTOR_STRONG | y | ubuntu18 | self_protection || OK
  13. CONFIG_VMAP_STACK | y | ubuntu18 | self_protection || OK
  14. CONFIG_THREAD_INFO_IN_TASK | y | ubuntu18 | self_protection || FAIL: not found
  15. CONFIG_SCHED_STACK_END_CHECK | y | ubuntu18 | self_protection || OK
  16. CONFIG_SLUB_DEBUG | y | ubuntu18 | self_protection || OK
  17. CONFIG_SLAB_FREELIST_HARDENED | y | ubuntu18 | self_protection || OK
  18. CONFIG_SLAB_FREELIST_RANDOM | y | ubuntu18 | self_protection || OK
  19. CONFIG_HARDENED_USERCOPY | y | ubuntu18 | self_protection || OK
  20. CONFIG_FORTIFY_SOURCE | y | ubuntu18 | self_protection || OK
  21. CONFIG_STRICT_MODULE_RWX | y | ubuntu18 | self_protection || FAIL: not found
  22. CONFIG_MODULE_SIG | y | ubuntu18 | self_protection || FAIL: "is not set"
  23. CONFIG_MODULE_SIG_ALL | y | ubuntu18 | self_protection || FAIL: "is not set"
  24. CONFIG_MODULE_SIG_SHA512 | y | ubuntu18 | self_protection || FAIL: not found
  25. CONFIG_SYN_COOKIES | y | ubuntu18 | self_protection || OK
  26. CONFIG_DEFAULT_MMAP_MIN_ADDR | 65536 | ubuntu18 | self_protection || FAIL: "4096"
  27. CONFIG_BUG_ON_DATA_CORRUPTION | y | kspp | self_protection || OK
  28. CONFIG_PAGE_POISONING | y | kspp | self_protection || OK
  29. CONFIG_GCC_PLUGINS | y | kspp | self_protection || FAIL: "is not set"
  30. CONFIG_GCC_PLUGIN_RANDSTRUCT | y | kspp | self_protection || FAIL: not found
  31. CONFIG_GCC_PLUGIN_STRUCTLEAK | y | kspp | self_protection || FAIL: not found
  32. CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF_ALL | y | kspp | self_protection || FAIL: not found
  33. CONFIG_GCC_PLUGIN_LATENT_ENTROPY | y | kspp | self_protection || FAIL: not found
  34. CONFIG_REFCOUNT_FULL | y | kspp | self_protection || FAIL: not found
  35. CONFIG_DEBUG_LIST | y | kspp | self_protection || OK
  36. CONFIG_DEBUG_SG | y | kspp | self_protection || FAIL: "is not set"
  37. CONFIG_DEBUG_CREDENTIALS | y | kspp | self_protection || FAIL: "is not set"
  38. CONFIG_DEBUG_NOTIFIERS | y | kspp | self_protection || FAIL: "is not set"
  39. CONFIG_MODULE_SIG_FORCE | y | kspp | self_protection || FAIL: "is not set"
  40. CONFIG_HARDENED_USERCOPY_FALLBACK | is not set | kspp | self_protection || OK
  41. CONFIG_GCC_PLUGIN_STACKLEAK | y | my | self_protection || FAIL: not found
  42. CONFIG_SLUB_DEBUG_ON | y | my | self_protection || FAIL: "is not set"
  43. CONFIG_SECURITY_DMESG_RESTRICT | y | my | self_protection || OK
  44. CONFIG_STATIC_USERMODEHELPER | y | my | self_protection || FAIL: not found
  45. CONFIG_PAGE_POISONING_NO_SANITY | is not set | my | self_protection || FAIL: "y"
  46. CONFIG_PAGE_POISONING_ZERO | is not set | my | self_protection || OK
  47. CONFIG_SECURITY | y | ubuntu18 | security_policy || OK
  48. CONFIG_SECURITY_YAMA | y | ubuntu18 | security_policy || OK
  49. CONFIG_SECURITY_SELINUX_DISABLE | is not set | ubuntu18 | security_policy || OK
  50. CONFIG_SECCOMP | y | ubuntu18 | cut_attack_surface || FAIL: not found
  51. CONFIG_SECCOMP_FILTER | y | ubuntu18 | cut_attack_surface || FAIL: not found
  52. CONFIG_STRICT_DEVMEM | y | ubuntu18 | cut_attack_surface || OK
  53. CONFIG_ACPI_CUSTOM_METHOD | is not set | ubuntu18 | cut_attack_surface || OK: not found
  54. CONFIG_COMPAT_BRK | is not set | ubuntu18 | cut_attack_surface || OK
  55. CONFIG_DEVKMEM | is not set | ubuntu18 | cut_attack_surface || OK
  56. CONFIG_COMPAT_VDSO | is not set | ubuntu18 | cut_attack_surface || OK: not found
  57. CONFIG_X86_PTDUMP | is not set | ubuntu18 | cut_attack_surface || OK: not found
  58. CONFIG_ZSMALLOC_STAT | is not set | ubuntu18 | cut_attack_surface || OK: not found
  59. CONFIG_PAGE_OWNER | is not set | ubuntu18 | cut_attack_surface || OK
  60. CONFIG_DEBUG_KMEMLEAK | is not set | ubuntu18 | cut_attack_surface || OK
  61. CONFIG_BINFMT_AOUT | is not set | ubuntu18 | cut_attack_surface || OK: not found
  62. CONFIG_IO_STRICT_DEVMEM | y | kspp | cut_attack_surface || OK
  63. CONFIG_LEGACY_VSYSCALL_NONE | y | kspp | cut_attack_surface || FAIL: not found
  64. CONFIG_BINFMT_MISC | is not set | kspp | cut_attack_surface || FAIL: "m"
  65. CONFIG_INET_DIAG | is not set | kspp | cut_attack_surface || FAIL: "m"
  66. CONFIG_KEXEC | is not set | kspp | cut_attack_surface || OK: not found
  67. CONFIG_PROC_KCORE | is not set | kspp | cut_attack_surface || FAIL: "y"
  68. CONFIG_LEGACY_PTYS | is not set | kspp | cut_attack_surface || OK
  69. CONFIG_IA32_EMULATION | is not set | kspp | cut_attack_surface || OK: not found
  70. CONFIG_X86_X32 | is not set | kspp | cut_attack_surface || OK: not found
  71. CONFIG_MODIFY_LDT_SYSCALL | is not set | kspp | cut_attack_surface || OK: not found
  72. CONFIG_HIBERNATION | is not set | kspp | cut_attack_surface || FAIL: "y"
  73. CONFIG_KPROBES | is not set |grsecurity| cut_attack_surface || FAIL: "y"
  74. CONFIG_UPROBES | is not set |grsecurity| cut_attack_surface || OK: not found
  75. CONFIG_GENERIC_TRACER | is not set |grsecurity| cut_attack_surface || OK: not found
  76. CONFIG_PROC_VMCORE | is not set |grsecurity| cut_attack_surface || OK: not found
  77. CONFIG_PROC_PAGE_MONITOR | is not set |grsecurity| cut_attack_surface || FAIL: "y"
  78. CONFIG_USELIB | is not set |grsecurity| cut_attack_surface || OK
  79. CONFIG_CHECKPOINT_RESTORE | is not set |grsecurity| cut_attack_surface || FAIL: "y"
  80. CONFIG_USERFAULTFD | is not set |grsecurity| cut_attack_surface || FAIL: "y"
  81. CONFIG_HWPOISON_INJECT | is not set |grsecurity| cut_attack_surface || FAIL: "m"
  82. CONFIG_MEM_SOFT_DIRTY | is not set |grsecurity| cut_attack_surface || FAIL: "y"
  83. CONFIG_DEVPORT | is not set |grsecurity| cut_attack_surface || FAIL: "y"
  84. CONFIG_DEBUG_FS | is not set |grsecurity| cut_attack_surface || FAIL: "y"
  85. CONFIG_NOTIFIER_ERROR_INJECTION | is not set |grsecurity| cut_attack_surface || FAIL: "m"
  86. CONFIG_KEXEC_FILE | is not set | my | cut_attack_surface || OK: not found
  87. CONFIG_LIVEPATCH | is not set | my | cut_attack_surface || OK: not found
  88. CONFIG_USER_NS | is not set | my | cut_attack_surface || FAIL: "y"
  89. CONFIG_IP_DCCP | is not set | my | cut_attack_surface || FAIL: "m"
  90. CONFIG_IP_SCTP | is not set | my | cut_attack_surface || FAIL: "m"
  91. CONFIG_FTRACE | is not set | my | cut_attack_surface || FAIL: "y"
  92. CONFIG_PROFILING | is not set | my | cut_attack_surface || FAIL: "y"
  93. CONFIG_BPF_JIT | is not set | my | cut_attack_surface || FAIL: "y"
  94. CONFIG_BPF_SYSCALL | is not set | my | cut_attack_surface || FAIL: "y"
  95. CONFIG_ARCH_MMAP_RND_BITS | 32 | my |userspace_protection|| FAIL: not found
  96.  
  97. [-] config check is NOT PASSED: 50 errors
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!