pyrox.dev
Merge pull request #142936 from michael-swan/master
+10
-14
pkgs/os-specific/linux/checksec/0001-attempt-to-modprobe-config-before-checking-kernel.patch
+10
-14
pkgs/os-specific/linux/checksec/0001-attempt-to-modprobe-config-before-checking-kernel.patch
···
1
-
From 6503848d9e0eb009e5f462116a963beacb208930 Mon Sep 17 00:00:00 2001
2
From: Austin Seipp <aseipp@pobox.com>
3
-
Date: Thu, 20 Feb 2014 00:11:44 -0600
4
Subject: [PATCH] attempt to 'modprobe config' before checking kernel
5
6
-
Signed-off-by: Austin Seipp <aseipp@pobox.com>
7
---
8
-
checksec.sh | 3 ++-
9
-
1 file changed, 2 insertions(+), 1 deletion(-)
10
11
diff --git a/checksec b/checksec
12
-
index dd1f72e..63acc29 100644
13
--- a/checksec
14
+++ b/checksec
15
-
@@ -676,7 +676,8 @@ kernelcheck() {
16
-
echo_message " userspace processes, this option lists the status of kernel configuration\n" '' '' ''
17
echo_message " options that harden the kernel itself against attack.\n\n" '' '' ''
18
echo_message " Kernel config:\n" '' '' '{ "kernel": '
19
-
-
20
-
+
21
+ modprobe configs 2> /dev/null
22
-
if [[ ! "${1}" == "" ]] ; then
23
kconfig="cat ${1}"
24
-
echo_message " Warning: The config ${1} on disk may not represent running kernel config!\n\n" "${1}" "<kernel config=\"${1}\"" "{ \"KernelConfig\":\"${1}\","
25
-
# update the architecture based on the config rather than the system
26
--
27
-
1.8.3.2
28
···
1
+
From 5cfb08effd21d9278e3eb8901c85112a331c3181 Mon Sep 17 00:00:00 2001
2
From: Austin Seipp <aseipp@pobox.com>
3
+
Date: Tue, 26 Oct 2021 09:23:07 +0000
4
Subject: [PATCH] attempt to 'modprobe config' before checking kernel
5
6
---
7
+
checksec | 1 +
8
+
1 file changed, 1 insertion(+)
9
10
diff --git a/checksec b/checksec
11
+
index 5536250..895073b 100755
12
--- a/checksec
13
+++ b/checksec
14
+
@@ -1059,6 +1059,7 @@ kernelcheck() {
15
echo_message " options that harden the kernel itself against attack.\n\n" '' '' ''
16
echo_message " Kernel config:\n" '' '' '{ "kernel": '
17
+
18
+ modprobe configs 2> /dev/null
19
+
if [[ ! "${1}" == "" ]]; then
20
kconfig="cat ${1}"
21
+
echo_message " Warning: The config ${1} on disk may not represent running kernel config!\n\n" "${1}" "<kernel config=\"${1}\"" "{ \"KernelConfig\":\"${1}\""
22
--
23
+
2.33.0
24
+2
-2
pkgs/os-specific/linux/checksec/default.nix
+2
-2
pkgs/os-specific/linux/checksec/default.nix
···
4
5
stdenv.mkDerivation rec {
6
pname = "checksec";
7
-
version = "2.4.0";
8
9
src = fetchFromGitHub {
10
owner = "slimm609";
11
repo = "checksec.sh";
12
rev = version;
13
-
sha256 = "1gbbq85d3g3mnm3xvgvi2085aba7qc3cmsbwn76al50ax1518j2q";
14
};
15
16
patches = [ ./0001-attempt-to-modprobe-config-before-checking-kernel.patch ];
···
4
5
stdenv.mkDerivation rec {
6
pname = "checksec";
7
+
version = "2.5.0";
8
9
src = fetchFromGitHub {
10
owner = "slimm609";
11
repo = "checksec.sh";
12
rev = version;
13
+
sha256 = "sha256-GxWXocz+GCEssRrIQP6E9hjVIhVh2EmZrefELxQlV1Q=";
14
};
15
16
patches = [ ./0001-attempt-to-modprobe-config-before-checking-kernel.patch ];