dprevot/evocheck
1
0
Fork 0
forked from evolix/evocheck
Code Issues Pull requests Projects Releases Wiki Activity

Do not use the BOOT_IMAGE trick

Browse source
This commit is contained in:
Benoît S. 2018-06-27 17:33:24 +02:00
parent ee60e28a5a
commit 3451218a16
1 changed files with 0 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
evocheck.sh
View file

@ -707,14 +707,6 @@ if [ -e /etc/debian_version ]; then
fi
if [ "$IS_MELTDOWN" = 1 ]; then
if grep -q BOOT_IMAGE= /proc/cmdline; then
# We check if the current running kernel has CONFIG_PAGE_TABLE_ISOLATION enabled
kernelPath=$(grep -Eo 'BOOT_IMAGE=[^ ]+' /proc/cmdline | cut -d= -f2)
kernelVer=${kernelPath##*/vmlinuz-}
kernelConfig="config-${kernelVer}"
grep -Eq '^(CONFIG_PAGE_TABLE_ISOLATION|CONFIG_KAISER)=y' "/boot/${kernelConfig}" \
|| echo 'IS_MELTDOWN FAILED!'
fi
# We check if the running kernel has kaiser loaded
if is_debianversion stretch; then
grep '^flags' /proc/cpuinfo | grep -qEw '(kaiser|pti)' || echo 'IS_MELTDOWN FAILED!'