forked from evolix/evocheck
Add a check for kernel config gile
This commit is contained in:
parent
ae1ec7b2b9
commit
db23167246
|
@ -719,8 +719,11 @@ if [ -e /etc/debian_version ]; then
|
||||||
kernelPath=$(grep -Eo 'BOOT_IMAGE=[^ ]+' /proc/cmdline | cut -d= -f2)
|
kernelPath=$(grep -Eo 'BOOT_IMAGE=[^ ]+' /proc/cmdline | cut -d= -f2)
|
||||||
kernelVer=${kernelPath##*/vmlinuz-}
|
kernelVer=${kernelPath##*/vmlinuz-}
|
||||||
kernelConfig="config-${kernelVer}"
|
kernelConfig="config-${kernelVer}"
|
||||||
grep -Eq '^CONFIG_PAGE_TABLE_ISOLATION=y' /boot/$kernelConfig || echo 'IS_MELTDOWN_SPECTRE FAILED!'
|
# Sometimes autodetection of kernel config file fail, so we test if the file really exists.
|
||||||
grep -Eq '^CONFIG_RETPOLINE=y' /boot/$kernelConfig || echo 'IS_MELTDOWN_SPECTRE FAILED!'
|
if [ -f /boot/$kernelConfig ]; then
|
||||||
|
grep -Eq '^CONFIG_PAGE_TABLE_ISOLATION=y' /boot/$kernelConfig || echo 'IS_MELTDOWN_SPECTRE FAILED!'
|
||||||
|
grep -Eq '^CONFIG_RETPOLINE=y' /boot/$kernelConfig || echo 'IS_MELTDOWN_SPECTRE FAILED!'
|
||||||
|
fi
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
|
|
Loading…
Reference in a new issue