[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#1108225: RFS: kernel-hardening-checker/0.6.10.1-1 [ITP] -- Tool for checking Linux kernel security hardening options



Hi, Salvo

Yes, we added man with upstream author, in version 0.6.10.2-1 you can do:
$ man kernel-hardening-checker

> Am I doing something wrong?
you are doing everything right, this command works for me:
$ sudo kernel-hardening-checker --mode verbose -a
[+] Special report mode: verbose
[+] Going to autodetect and check the security hardening options of the running kernel
[+] Detected version of the running kernel: (6, 1, 0)
[+] Detected kconfig file of the running kernel: /boot/config-6.1.0-32-amd64
[+] Detected cmdline parameters of the running kernel: /proc/cmdline
[+] Saved sysctls to a temporary file /tmp/sysctl-pyrxvnl5
[+] Detected architecture: X86_64
[+] Detected compiler: GCC 120200
[?] No check for kconfig option CONFIG_CC_VERSION_TEXT ("gcc-12 (Debian 12.2.0-14) 12.2.0")
[?] No check for kconfig option CONFIG_GCC_VERSION (120200)
[?] No check for kconfig option CONFIG_CLANG_VERSION (0)
[?] No check for kconfig option CONFIG_AS_IS_GNU (y)
[?] No check for kconfig option CONFIG_AS_VERSION (24000)
[?] No check for kconfig option CONFIG_LD_IS_BFD (y)
...

but for some reason it doesn't work for you and I don't know why, you can refer
to https://github.com/a13xp0p0v/kernel-hardening-checker/issues

---
Regards, Kirill Rekhov

GPG Fingerprint:
2640 769D FDA1 AAA0 F863  D1AE 5F2C 5905 519C E0A0

вт, 8 июл. 2025 г. в 20:52, Salvo Tomaselli <tiposchi@tiscali.it>:
Hello,

thanks for packaging this.

I was going to upload but when trying it I couldn't really get it to work:

$ kernel-hardening-checker --mode verbose -a
[+] Special report mode: verbose
[+] Going to autodetect and check the security hardening options of the
running kernel
[-] ERROR: parsing /proc/version failed: failed to parse the version
"6.12.35+deb13-amd64"

Is this normal?

Am I doing something wrong?

Perhaps you want to add some examples of usage in the manpage before we upload
it?

--
Salvo Tomaselli

"Io non mi sento obbligato a credere che lo stesso Dio che ci ha dotato di
senso, ragione ed intelletto intendesse che noi ne facessimo a meno."
                -- Galileo Galilei

https://ltworf.codeberg.page/
-----BEGIN PGP SIGNATURE-----
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=UVtb
-----END PGP SIGNATURE-----

Reply to: