ERORR? about kernel-hardening-checker

[a13xp0p0v]

Hi @alpahca,

Quoting kconfig-hardened-check --help:

  -p {X86_64,X86_32,ARM64,ARM}, --print {X86_64,X86_32,ARM64,ARM}
                        print security hardening preferences for the selected architecture
  -c CONFIG, --config CONFIG
                        check the kernel kconfig file against these preferences

So for checking your kernel config simply do this:

$ bin/kconfig-hardened-check -c ~/lkd_kernels/kconfig.prod01/.config

[alpahca]

Oh thx. But... VirtualBox:~/lkd_kernels/kconfig_prod01$ '/home/ked/kconfig-hardened-check/bin/kconfig-hardened-check' -c '/home/ked/lkd_kernels/kconfig_prod01' [+] Kconfig file to check: /home/ked/lkd_kernels/kconfig_prod01 Traceback (most recent call last): File "/home/ked/kconfig-hardened-check/bin/kconfig-hardened-check", line 16, in kconfig_hardened_check.main() File "/home/ked/kconfig-hardened-check/kconfig_hardened_check/init.py", line 976, in main arch, msg = detect_arch(args.config, supported_archs) File "/home/ked/kconfig-hardened-check/kconfig_hardened_check/init.py", line 275, in detect_arch with open(fname, 'r') as f: IsADirectoryError: [Errno 21] Is a directory: '/home/ked/lkd_kernels/kconfig_prod01' ​ Uhm... that should be my problem? ​ -----Original Message----- From: "Alexander ***@***.***> To: ***@***.***>; Cc: ***@***.***>; ***@***.***>; Sent: 2022-09-25 (일) 06:18:44 (GMT+09:00) Subject: Re: [a13xp0p0v/kconfig-hardened-check] ERORR? (Issue #73) Hi @alpahca, Quoting kconfig-hardened-check --help: -p {X86_64,X86_32,ARM64,ARM}, --print {X86_64,X86_32,ARM64,ARM} print security hardening preferences for the selected architecture -c CONFIG, --config CONFIG check the kernel kconfig file against these preferences So for checking your kernel config simply do this: $ bin/kconfig-hardened-check -c ~/lkd_kernels/kconfig.prod01/.config — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you were mentioned.Message ID: ***@***.***> ​

[a13xp0p0v]

Hi @alpahca,

Please try to use -c with the path to the kconfig file, not a directory.

Best regards,
Alexander