The separation between desktop and server. about kernel-hardening-checker

[wryMitts]

Another distinction is virtual machine desktop and virtual machine server.

A server still needs CONFIG_FB to show boot display if something goes wrong in initrd, etc. Virtual machine server with serial does not. Certain cloud servers available for sale online have both serial and video options available, some none at all (SSH only). So this is a very usecase specific item.

This may be harder to add because many hypervisors such as Xen, KVM, Virtualbox, might require different kernel options enabled to function as expected.

[migrgh]

current situation of automatic merging the Kconfig fragment you have to manual go over options like CONFIG_FB if in need.

or have a profile which work using automatic merging of the Kconfig fragment.

but yes it's very use case specific how a profile should look like.

[a13xp0p0v]

Hello @migrgh and @wryMitts,

Thanks for creating this issue. It is connected to the issue #50.

CC @petervanvugt, @egberts.

Please have a look and give your ideas.

What do you think about a mechanism allowing the kernel-hardening-checker users to create new custom checks and redefine the existing rules?

For example, kernel-hardening-checker may have a new -r argument for specifying a file with rule changes from the user.