Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- bash -c 'printf "TPM 2.0 : %s\nSecure Boot : %s\nKernel Clean : %s\nMeasured Boot : %s\nIOMMU : %s\nLockdown : %s\nKexec Disabled : %s\nLSM BPF : %s\n" "$([ "$(cat /sys/class/tpm/tpm0/tpm_version_major 2>/dev/null)" = "2" ] && echo OK || echo NO)" "$(mokutil --sb-state 2>/dev/null | grep -q "enabled" && echo OK || echo NO)" "$([ "$(cat /proc/sys/kernel/tainted 2>/dev/null)" = "0" ] && echo OK || echo NO)" "$(systemd-analyze pcrs 2>/dev/null | grep -E "kernel-initrd" | grep -qv "0000000000000000000000000000000000000000000000000000000000000000" && echo OK || echo NO)" "$([ $(find /sys/kernel/iommu_groups/ -maxdepth 1 -mindepth 1 2>/dev/null | wc -l) -gt 0 ] && ! grep -q "iommu=pt" /proc/cmdline && echo OK || echo NO)" "$(grep -q "\[integrity\]" /sys/kernel/security/lockdown 2>/dev/null && echo OK || echo NO)" "$(([ "$(cat /proc/sys/kernel/kexec_load_disabled 2>/dev/null)" = "1" ] || grep -q "\[integrity\]" /sys/kernel/security/lockdown 2>/dev/null) && echo OK || echo NO)" "$(grep -qw "bpf" /sys/kernel/security/lsm 2>/dev/null && echo OK || echo NO)"'
Advertisement