all messages for Guix-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
* [bug#59043] [PATCH] gnu: Add kconfig-hardened-check.
@ 2022-11-05 10:53 Hilton Chain via Guix-patches via
  2022-11-06 14:12 ` Christopher Baines
  0 siblings, 1 reply; 4+ messages in thread
From: Hilton Chain via Guix-patches via @ 2022-11-05 10:53 UTC (permalink / raw)
  To: 59043

* gnu/packages/linux.scm (kconfig-hardened-check): New variable.
---
 gnu/packages/linux.scm | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/gnu/packages/linux.scm b/gnu/packages/linux.scm
index cf11a7fc1b..3aa5613a15 100644
--- a/gnu/packages/linux.scm
+++ b/gnu/packages/linux.scm
@@ -9512,3 +9512,24 @@ (define-public tp-smapi-module
 @acronym{SMAPI, System Management Application Program Interface} and direct
 access to the embedded controller.")
     (license license:gpl2+)))
+
+(define-public kconfig-hardened-check
+  (package
+    (name "kconfig-hardened-check")
+    (version "0.5.17")
+    (source (origin
+              (method git-fetch)
+              (uri (git-reference
+                    (url "https://github.com/a13xp0p0v/kconfig-hardened-check")
+                    (commit (string-append "v" version))))
+              (file-name (git-file-name name version))
+              (sha256
+               (base32
+                "0p9pywfxwyk4yfgaf7bhqrf72ywc6w6k77dbi7lldynha886ih4a"))))
+    (build-system python-build-system)
+    (home-page "https://github.com/a13xp0p0v/kconfig-hardened-check")
+    (synopsis
+     "Tool for checking the security hardening options of the Linux kernel")
+    (description
+     "Tool for checking the security hardening options of the Linux kernel.")
+    (license license:gpl3)))

base-commit: e67f9d7ab0c4bc957a918987a347a9ca429f3b0a
-- 
2.38.0





^ permalink raw reply related	[flat|nested] 4+ messages in thread

* [bug#59043] [PATCH] gnu: Add kconfig-hardened-check.
  2022-11-05 10:53 [bug#59043] [PATCH] gnu: Add kconfig-hardened-check Hilton Chain via Guix-patches via
@ 2022-11-06 14:12 ` Christopher Baines
  2022-11-06 14:52   ` [bug#59043] [PATCH v2] " Hilton Chain via Guix-patches via
  0 siblings, 1 reply; 4+ messages in thread
From: Christopher Baines @ 2022-11-06 14:12 UTC (permalink / raw)
  To: Hilton Chain; +Cc: 59043

[-- Attachment #1: Type: text/plain, Size: 644 bytes --]


Hilton Chain via Guix-patches via <guix-patches@gnu.org> writes:

> +    (home-page "https://github.com/a13xp0p0v/kconfig-hardened-check")
> +    (synopsis
> +     "Tool for checking the security hardening options of the Linux kernel")
> +    (description
> +     "Tool for checking the security hardening options of the Linux kernel.")

This looks generally OK to me, but could you have a go at writing a
description that's different to the synopsis?

Even just wording it slightly differently would be OK (e.g. "The
@code{kconfig-hardened-check} tool helps with checking the security
hardening options of the Linux kernel").

Thanks,

Chris

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 987 bytes --]

^ permalink raw reply	[flat|nested] 4+ messages in thread

* [bug#59043] [PATCH v2] gnu: Add kconfig-hardened-check.
  2022-11-06 14:12 ` Christopher Baines
@ 2022-11-06 14:52   ` Hilton Chain via Guix-patches via
  2022-11-07 19:57     ` bug#59043: " Christopher Baines
  0 siblings, 1 reply; 4+ messages in thread
From: Hilton Chain via Guix-patches via @ 2022-11-06 14:52 UTC (permalink / raw)
  To: Christopher Baines; +Cc: 59043

* gnu/packages/linux.scm (kconfig-hardened-check): New variable.
---
v1 -> v2: Add more description.

 gnu/packages/linux.scm | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/gnu/packages/linux.scm b/gnu/packages/linux.scm
index cf11a7fc1b..8eadf8354c 100644
--- a/gnu/packages/linux.scm
+++ b/gnu/packages/linux.scm
@@ -9512,3 +9512,35 @@ (define-public tp-smapi-module
 @acronym{SMAPI, System Management Application Program Interface} and direct
 access to the embedded controller.")
     (license license:gpl2+)))
+
+(define-public kconfig-hardened-check
+  (package
+    (name "kconfig-hardened-check")
+    (version "0.5.17")
+    (source (origin
+              (method git-fetch)
+              (uri (git-reference
+                    (url "https://github.com/a13xp0p0v/kconfig-hardened-check")
+                    (commit (string-append "v" version))))
+              (file-name (git-file-name name version))
+              (sha256
+               (base32
+                "0p9pywfxwyk4yfgaf7bhqrf72ywc6w6k77dbi7lldynha886ih4a"))))
+    (build-system python-build-system)
+    (home-page "https://github.com/a13xp0p0v/kconfig-hardened-check")
+    (synopsis
+     "Tool for checking the security hardening options of the Linux kernel")
+    (description
+     "@code{kconfig-hardened-check} is a tool for checking the security
+hardening options of the Linux kernel.  Provided preferences are based on
+suggestions from various sources, including:
+
+@itemize
+@item KSPP recommended settings
+@item CLIP OS kernel configuration
+@item Last public grsecurity patch (options which they disable)
+@item SECURITY_LOCKDOWN_LSM patchset
+@item Direct feedback from the Linux kernel maintainers
+@end itemize\n
+This tool supports checking Kconfig options and kernel cmdline parameters.")
+    (license license:gpl3)))

base-commit: 97d565c786ee1a1eb920ed66384f60aad20e5cc2
--
2.38.0




^ permalink raw reply related	[flat|nested] 4+ messages in thread

* bug#59043: [PATCH v2] gnu: Add kconfig-hardened-check.
  2022-11-06 14:52   ` [bug#59043] [PATCH v2] " Hilton Chain via Guix-patches via
@ 2022-11-07 19:57     ` Christopher Baines
  0 siblings, 0 replies; 4+ messages in thread
From: Christopher Baines @ 2022-11-07 19:57 UTC (permalink / raw)
  To: Hilton Chain; +Cc: 59043-done, guix-patches

[-- Attachment #1: Type: text/plain, Size: 381 bytes --]


Hilton Chain <hako@ultrarare.space> writes:

> * gnu/packages/linux.scm (kconfig-hardened-check): New variable.
> ---
> v1 -> v2: Add more description.
>
>  gnu/packages/linux.scm | 32 ++++++++++++++++++++++++++++++++
>  1 file changed, 32 insertions(+)
>

Thanks! That looks good, I've gone ahead and pushed to master as
cad335a32acf8c31b49fe83f1b38b1d1a6da76be.

Thanks,

Chris

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 987 bytes --]

^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2022-11-07 19:59 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2022-11-05 10:53 [bug#59043] [PATCH] gnu: Add kconfig-hardened-check Hilton Chain via Guix-patches via
2022-11-06 14:12 ` Christopher Baines
2022-11-06 14:52   ` [bug#59043] [PATCH v2] " Hilton Chain via Guix-patches via
2022-11-07 19:57     ` bug#59043: " Christopher Baines

Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/guix.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.