An XCCDF Group - A logical subset of the XCCDF Benchmark
0
/boot/config-*
CONFIG_ACPI_CUSTOM_METHOD
grep CONFIG_ACPI_CUSTOM_METHOD /boot/config-*
CONFIG_ARM64_SW_TTBR0_PAN
grep CONFIG_ARM64_SW_TTBR0_PAN /boot/config-*
CONFIG_BINFMT_MISC
grep CONFIG_BINFMT_MISC /boot/config-*
CONFIG_BUG
grep CONFIG_BUG /boot/config-*
CONFIG_BUG_ON_DATA_CORRUPTION
grep CONFIG_BUG_ON_DATA_CORRUPTION /boot/config-*
brk()
CONFIG_COMPAT_BRK
"n"
grep CONFIG_COMPAT_BRK /boot/config-*
CONFIG_COMPAT_VDSO
y
grep CONFIG_COMPAT_VDSO /boot/config-*
CONFIG_DEBUG_CREDENTIALS
grep CONFIG_DEBUG_CREDENTIALS /boot/config-*
debugfs
CONFIG_DEBUG_FS
grep CONFIG_DEBUG_FS /boot/config-*
CONFIG_DEBUG_LIST
grep CONFIG_DEBUG_LIST /boot/config-*
CONFIG_DEBUG_NOTIFIERS
grep CONFIG_DEBUG_NOTIFIERS /boot/config-*
CONFIG_DEBUG_SG
grep CONFIG_DEBUG_SG /boot/config-*
CONFIG_DEBUG_WX
grep CONFIG_DEBUG_WX /boot/config-*
CONFIG_DEFAULT_MMAP_MIN_ADDR
grep CONFIG_DEFAULT_MMAP_MIN_ADDR /boot/config-*
CONFIG_DEVKMEM
grep CONFIG_DEVKMEM /boot/config-*
CONFIG_FORTIFY_SOURCE
grep CONFIG_FORTIFY_SOURCE /boot/config-*
CONFIG_HARDENED_USERCOPY
grep CONFIG_HARDENED_USERCOPY /boot/config-*
CONFIG_HARDENED_USERCOPY_FALLBACK
grep CONFIG_HARDENED_USERCOPY_FALLBACK /boot/config-*
CONFIG_HIBERNATION
grep CONFIG_HIBERNATION /boot/config-*
CONFIG_IA32_EMULATION
grep CONFIG_IA32_EMULATION /boot/config-*
CONFIG_IPV6
grep CONFIG_IPV6 /boot/config-*
kexec
CONFIG_KEXEC
grep CONFIG_KEXEC /boot/config-*
CONFIG_LEGACY_PTYS
grep CONFIG_LEGACY_PTYS /boot/config-*
CONFIG_LEGACY_VSYSCALL_EMULATE
grep CONFIG_LEGACY_VSYSCALL_EMULATE /boot/config-*
CONFIG_LEGACY_VSYSCALL_NONE
grep CONFIG_LEGACY_VSYSCALL_NONE /boot/config-*
CONFIG_MODIFY_LDT_SYSCALL
grep CONFIG_MODIFY_LDT_SYSCALL /boot/config-*
CONFIG_MODULE_SIG
grep CONFIG_MODULE_SIG /boot/config-*
CONFIG_MODULE_SIG_ALL
grep CONFIG_MODULE_SIG_ALL /boot/config-*
CONFIG_MODULE_SIG_FORCE
grep CONFIG_MODULE_SIG_FORCE /boot/config-*
CONFIG_MODULE_SIG_HASH
grep CONFIG_MODULE_SIG_HASH /boot/config-*
certs/signing_key.pem
CONFIG_MODULE_SIG_KEY
grep CONFIG_MODULE_SIG_KEY /boot/config-*
CONFIG_MODULE_SIG_SHA512
grep CONFIG_MODULE_SIG_SHA512 /boot/config-*
CONFIG_PAGE_POISONING
grep CONFIG_PAGE_POISONING /boot/config-*
CONFIG_PAGE_POISONING_NO_SANITY
grep CONFIG_PAGE_POISONING_NO_SANITY /boot/config-*
CONFIG_PAGE_POISONING_ZERO
grep CONFIG_PAGE_POISONING_ZERO /boot/config-*
CONFIG_PAGE_TABLE_ISOLATION
grep CONFIG_PAGE_TABLE_ISOLATION /boot/config-*
CONFIG_PANIC_ON_OOPS
grep CONFIG_PANIC_ON_OOPS /boot/config-*
CONFIG_PANIC_TIMEOUT
grep CONFIG_PANIC_TIMEOUT /boot/config-*
CONFIG_PROC_KCORE
grep CONFIG_PROC_KCORE /boot/config-*
CONFIG_RANDOMIZE_BASE
grep CONFIG_RANDOMIZE_BASE /boot/config-*
CONFIG_RANDOMIZE_MEMORY
grep CONFIG_RANDOMIZE_MEMORY /boot/config-*
CONFIG_REFCOUNT_FULL
grep CONFIG_REFCOUNT_FULL /boot/config-*
CONFIG_RETPOLINE
grep CONFIG_RETPOLINE /boot/config-*
CONFIG_SCHED_STACK_END_CHECK
grep CONFIG_SCHED_STACK_END_CHECK /boot/config-*
CONFIG_SECCOMP
grep CONFIG_SECCOMP /boot/config-*
CONFIG_SECCOMP_FILTER
grep CONFIG_SECCOMP_FILTER /boot/config-*
CONFIG_SECURITY
grep CONFIG_SECURITY /boot/config-*
CONFIG_SECURITY_DMESG_RESTRICT
grep CONFIG_SECURITY_DMESG_RESTRICT /boot/config-*
CONFIG_SECURITY_WRITABLE_HOOKS
grep CONFIG_SECURITY_WRITABLE_HOOKS /boot/config-*
ptrace()
CONFIG_SECURITY_YAMA
grep CONFIG_SECURITY_YAMA /boot/config-*
CONFIG_SLAB_FREELIST_HARDENED
grep CONFIG_SLAB_FREELIST_HARDENED /boot/config-*
CONFIG_SLAB_FREELIST_RANDOM
grep CONFIG_SLAB_FREELIST_RANDOM /boot/config-*
CONFIG_SLAB_MERGE_DEFAULT
grep CONFIG_SLAB_MERGE_DEFAULT /boot/config-*
CONFIG_SLUB_DEBUG
grep CONFIG_SLUB_DEBUG /boot/config-*
CONFIG_STACKPROTECTOR
grep CONFIG_STACKPROTECTOR /boot/config-*
CONFIG_STACKPROTECTOR_STRONG
grep CONFIG_STACKPROTECTOR_STRONG /boot/config-*
CONFIG_STRICT_KERNEL_RWX
grep CONFIG_STRICT_KERNEL_RWX /boot/config-*
CONFIG_STRICT_MODULE_RWX
grep CONFIG_STRICT_MODULE_RWX /boot/config-*
CONFIG_SYN_COOKIES
grep CONFIG_SYN_COOKIES /boot/config-*
CONFIG_UNMAP_KERNEL_AT_EL0
grep CONFIG_UNMAP_KERNEL_AT_EL0 /boot/config-*
CONFIG_VMAP_STACK
grep CONFIG_VMAP_STACK /boot/config-*
CONFIG_X86_VSYSCALL_EMULATION
grep CONFIG_X86_VSYSCALL_EMULATION /boot/config-*
CONFIG_GCC_PLUGIN_LATENT_ENTROPY
grep CONFIG_GCC_PLUGIN_LATENT_ENTROPY /boot/config-*
CONFIG_GCC_PLUGIN_STRUCTLEAK
grep CONFIG_GCC_PLUGIN_STRUCTLEAK /boot/config-*