Files
zephyr/scripts/kconfig/hardened.csv
Flavio Ceolin 02ac343c18 security: hardening: Update general recommendations
Update security recommendations. That is not a
thorough list though.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-05-13 02:28:29 +09:00

3.4 KiB

1BOOT_BANNERn
2BOOT_DELAY0
3BOUNDS_CHECK_BYPASS_MITIGATIONy
4BT_CONN_DISABLE_SECURITYn
5BT_DEBUG_KEYSn
6BT_DEBUG_SMPn
7BT_FIXED_PASSKEYn
8BT_LOG_SNIFFER_INFOn
9BT_OOB_DATA_FIXEDn
10BT_SMP_ENFORCE_MITMy
11BT_STORE_DEBUG_KEYSn
12BT_TESTINGn
13BT_USE_DEBUG_KEYSn
14BUILD_OUTPUT_STRIPPEDy
15BUILTIN_STACK_GUARDy
16CORTEX_M_DEBUG_MONITOR_HOOKn
17DMA_INTEL_ADSP_GPDMA_DEBUGn
18ESPI_PERIPHERAL_DEBUG_PORT_80n
19ETH_E1000_VERBOSE_DEBUGn
20ETH_MCUX_PHY_EXTRA_DEBUGn
21EXECUTE_XOR_WRITEy
22FAULT_DUMP0
23HW_STACK_PROTECTIONy
24INIT_STACKSn
25LOGn
26MODEM_CONTEXT_VERBOSE_DEBUGn
27MPU_STACK_GUARDy
28OVERRIDE_FRAME_POINTER_DEFAULTy
29SHELLn
30SOC_ATMEL_SAME70_DISABLE_ERASE_PINy
31SOC_ATMEL_SAME70_WAIT_MODEn
32SOC_MEC1501_DEBUG_DISABLEDy
33STACK_CANARIESy
34STACK_POINTER_RANDOM100
35STACK_SENTINELy
36STATSn
37TESTn
38TEST_RANDOM_GENERATORn
39TEST_SHELLn
40TEST_USERSPACEn
41TFM_CMAKE_BUILD_TYPE_DEBUGn
42THREAD_MONITORn
43THREAD_NAMEn
44TIMER_RANDOM_GENERATORn
45TRACINGn
46X86_MMUy
47ZTESTn
48# Experimental options
49BT_A2DPnexperimental
50BT_AUDIOnexperimental
51BT_AVDTPnexperimental
52BT_BREDRnexperimental
53BT_CTLR_ADV_DATA_CHAINnexperimental
54BT_CTLR_DTM_HCI_DF_IQ_REPORTnexperimental
55BT_CTLR_SET_HOST_FEATUREnexperimental
56BT_DFnexperimental
57BT_EADnexperimental
58BT_EATTnexperimental
59BT_H5nexperimental
60BT_HFP_HFnexperimental
61BT_IASnexperimental
62BT_IAS_CLIENTnexperimental
63BT_ISO_BROADCASTERnexperimental
64BT_ISO_PERIPHERALnexperimental
65BT_ISO_SYNC_RECEIVERnexperimental
66BT_MESH_USES_MBEDTLS_PSAnexperimental
67BT_MESH_V1d1nexperimental
68BT_OTSnexperimental
69BT_OTS_CLIENTnexperimental
70BT_PASSKEY_KEYPRESSnexperimental
71BT_PER_ADV_RSPnexperimental
72BT_PER_ADV_SYNC_RSPnexperimental
73BT_RFCOMMnexperimental
74CAN_NETnexperimental
75CRYPTO_MBEDTLS_SHIMnexperimental
76CRYPTO_TINYCRYPT_SHIMnexperimental
77DEMAND_PAGINGnexperimental
78ETH_E1000_PTP_CLOCKnexperimental
79GPIO_ENABLE_DISABLE_INTERRUPTnexperimental
80GPIO_GET_CONFIGnexperimental
81GPIO_GET_DIRECTIONnexperimental
82HTTP_CLIENTnexperimental
83HTTP_SERVERnexperimental
84ICE40_FPGAnexperimental
85ISOTPnexperimental
86LOG_BACKEND_BLEnexperimental
87LORAnexperimental
88LORAWANnexperimental
89LWM2M_FIRMWARE_UPDATE_OBJ_SUPPORT_MULTIPLEnexperimental
90LWM2M_GATEWAY_OBJ_SUPPORTnexperimental
91MEMCnexperimental
92MIPI_DSInexperimental
93MM_DRVnexperimental
94MODEM_CONTEXTnexperimental
95MQTT_SN_LIBnexperimental
96NET_BUF_VARIABLE_DATA_SIZEnexperimental
97NET_CONNECTION_MANAGERnexperimental
98NET_GPTPnexperimental
99NET_IPV4_AUTOnexperimental
100NET_L2_IEEE802154_SECURITYnexperimental
101NET_L2_PPPnexperimental
102NET_PROMISCUOUS_MODEnexperimental
103NET_SOCKETS_CANnexperimental
104NET_SOCKETS_ENABLE_DTLSnexperimental
105NET_SOCKETS_NET_MGMTnexperimental
106NET_SOCKETS_SOCKOPT_TLSnexperimental
107NET_TC_THREAD_PREEMPTIVEnexperimental
108OPENTHREAD_MLE_LONG_ROUTESnexperimental
109SHELL_TELNET_SUPPORT_COMMANDnexperimental
110SPI_EXTENDED_MODESnexperimental
111SPI_RTIOnexperimental
112SPI_SLAVEnexperimental
113STM32_LPTIM_TIMERnexperimental
114TFTP_LIBnexperimental
115THRIFTnexperimental
116UART_EMULnexperimental
117UART_MUXnexperimental
118UDC_DRIVERnexperimental
119UHC_DRIVERnexperimental
120USBD_CDC_ACM_CLASSnexperimental
121USBD_MSC_CLASSnexperimental
122USB_DEVICE_AUDIOnexperimental
123USB_DEVICE_STACK_NEXTnexperimental
124USB_HOST_STACKnexperimental
125WEBSOCKET_CLIENTnexperimental
126# Debug options
127ASSERTn
128DEBUGn
129DEBUG_COREDUMP=n
130DEBUG_INFOn
131DEBUG_THREAD_INFOn
132EARLY_CONSOLEn
133EXCEPTION_DEBUGn
134GDBSTUBn
135PRINTKn
136STACK_USAGEn
137THREAD_ANALYZERn