[{"option_name": "CONFIG_BUG", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "FAIL: \"is not set\"", "check_result_bool": false}, {"option_name": "CONFIG_SLUB_DEBUG", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_THREAD_INFO_IN_TASK", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_IOMMU_DEFAULT_PASSTHROUGH", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_IOMMU_SUPPORT", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_STACKPROTECTOR", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_STACKPROTECTOR_STRONG", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_STRICT_KERNEL_RWX", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_STRICT_MODULE_RWX", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_REFCOUNT_FULL", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_INIT_STACK_ALL_ZERO", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_CPU_MITIGATIONS", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_RANDOMIZE_BASE", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_VMAP_STACK", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_LSM_MMAP_MIN_ADDR", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "65536", "check_result": "FAIL: \"32768\"", "check_result_bool": false}, {"option_name": "CONFIG_DEBUG_WX", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "FAIL: is not found", "check_result_bool": false}, {"option_name": "CONFIG_WERROR", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "FAIL: is not found", "check_result_bool": false}, {"option_name": "CONFIG_X86_MCE", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_SPECTRE_V1", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_SPECTRE_V2", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_SSB", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MICROCODE", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MICROCODE_INTEL", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MICROCODE_AMD", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_X86_SMAP", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_X86_UMIP", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_X86_MCE_INTEL", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_X86_MCE_AMD", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_RETPOLINE", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_GDS", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_RFDS", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_SPECTRE_BHI", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_MDS", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_TAA", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_MMIO_STALE_DATA", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_L1TF", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_RETBLEED", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_SRBDS", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_TSA", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_VMSCAPE", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_RANDOMIZE_MEMORY", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_X86_KERNEL_IBT", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_RETHUNK", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_PAGE_TABLE_ISOLATION", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_UNRET_ENTRY", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_CALL_DEPTH_TRACKING", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_IBPB_ENTRY", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_IBRS_ENTRY", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_SRSO", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_ITS", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_INTEL_IOMMU", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_AMD_IOMMU", "type": "kconfig", "reason": "self_protection", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_RANDOM_KMALLOC_CACHES", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SLAB_MERGE_DEFAULT", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_BUG_ON_DATA_CORRUPTION", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SLAB_FREELIST_HARDENED", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SLAB_FREELIST_RANDOM", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SHUFFLE_PAGE_ALLOCATOR", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_FORTIFY_SOURCE", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_DEBUG_VIRTUAL", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_INIT_ON_ALLOC_DEFAULT_ON", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_STATIC_USERMODEHELPER", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SECURITY_LOCKDOWN_LSM", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_LSM", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "*lockdown*", "check_result": "FAIL: is not found", "check_result_bool": false}, {"option_name": "CONFIG_SECURITY_LOCKDOWN_LSM_EARLY", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_DEBUG_SG", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_ZERO_CALL_USED_REGS", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_DEBUG_CREDENTIALS", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_DEBUG_NOTIFIERS", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_KFENCE", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_KFENCE_SAMPLE_INTERVAL", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "100", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_RANDSTRUCT_FULL", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_HARDENED_USERCOPY", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_HARDENED_USERCOPY_DEFAULT_ON", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_HARDENED_USERCOPY_FALLBACK", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_HARDENED_USERCOPY_PAGESPAN", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_GCC_PLUGIN_LATENT_ENTROPY", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "FAIL: CONFIG_CC_IS_GCC is not \"y\"", "check_result_bool": false}, {"option_name": "CONFIG_MODULE_SIG", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MODULE_SIG_ALL", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MODULE_SIG_SHA512", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MODULE_SIG_FORCE", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_INIT_ON_FREE_DEFAULT_ON", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_EFI_DISABLE_PCI_DMA", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_RESET_ATTACK_MITIGATION", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_UBSAN_BOUNDS", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_UBSAN_LOCAL_BOUNDS", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_UBSAN_TRAP", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_UBSAN_SANITIZE_ALL", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SCHED_STACK_END_CHECK", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_KSTACK_ERASE", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_KSTACK_ERASE_METRICS", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_KSTACK_ERASE_RUNTIME_DISABLE", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SCHED_CORE", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_LIST_HARDENED", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_PAGE_TABLE_CHECK", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_PAGE_TABLE_CHECK_ENFORCED", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_DEFAULT_MMAP_MIN_ADDR", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "65536", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_HW_RANDOM_TPM", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_CFI_CLANG", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "FAIL: CONFIG_CC_IS_CLANG is not \"y\"", "check_result_bool": false}, {"option_name": "CONFIG_CFI_PERMISSIVE", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "is not set", "check_result": "FAIL: CONFIG_CC_IS_CLANG is not \"y\"", "check_result_bool": false}, {"option_name": "CONFIG_IOMMU_DEFAULT_DMA_STRICT", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_INTEL_IOMMU_DEFAULT_ON", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_CFI_AUTO_DEFAULT", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MITIGATION_SLS", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_INTEL_IOMMU_SVM", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_AMD_IOMMU_V2", "type": "kconfig", "reason": "self_protection", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SECURITY", "type": "kconfig", "reason": "security_policy", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SECURITY_YAMA", "type": "kconfig", "reason": "security_policy", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_LSM", "type": "kconfig", "reason": "security_policy", "decision": "kspp", "desired_val": "*yama*", "check_result": "FAIL: is not found", "check_result_bool": false}, {"option_name": "CONFIG_SECURITY_LANDLOCK", "type": "kconfig", "reason": "security_policy", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_LSM", "type": "kconfig", "reason": "security_policy", "decision": "kspp", "desired_val": "*landlock*", "check_result": "FAIL: is not found", "check_result_bool": false}, {"option_name": "CONFIG_SECURITY_SELINUX_DISABLE", "type": "kconfig", "reason": "security_policy", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SECURITY_SELINUX_BOOTPARAM", "type": "kconfig", "reason": "security_policy", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SECURITY_SELINUX_DEVELOP", "type": "kconfig", "reason": "security_policy", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SECURITY_WRITABLE_HOOKS", "type": "kconfig", "reason": "security_policy", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SECURITY_SELINUX_DEBUG", "type": "kconfig", "reason": "security_policy", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SECURITY_SELINUX", "type": "kconfig", "reason": "security_policy", "decision": "a13xp0p0v", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_LSM", "type": "kconfig", "reason": "security_policy", "decision": "a13xp0p0v", "desired_val": "*selinux*", "check_result": "FAIL: is not found", "check_result_bool": false}, {"option_name": "CONFIG_SECCOMP", "type": "kconfig", "reason": "cut_attack_surface", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SECCOMP_FILTER", "type": "kconfig", "reason": "cut_attack_surface", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_BPF_UNPRIV_DEFAULT_OFF", "type": "kconfig", "reason": "cut_attack_surface", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_STRICT_DEVMEM", "type": "kconfig", "reason": "cut_attack_surface", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_X86_INTEL_TSX_MODE_OFF", "type": "kconfig", "reason": "cut_attack_surface", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SECURITY_DMESG_RESTRICT", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_ACPI_CUSTOM_METHOD", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_COMPAT_BRK", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_DEVKMEM", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_BINFMT_MISC", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_INET_DIAG", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_KEXEC", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_PROC_KCORE", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_LEGACY_PTYS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_HIBERNATION", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_COMPAT", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_IA32_EMULATION", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_X86_X32", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_X86_X32_ABI", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MODIFY_LDT_SYSCALL", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_OABI_COMPAT", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_X86_MSR", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_LEGACY_TIOCSTI", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MODULE_FORCE_LOAD", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_M486", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MODULES", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_DEVMEM", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "FAIL: \"y\"", "check_result_bool": false}, {"option_name": "CONFIG_IO_STRICT_DEVMEM", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_LDISC_AUTOLOAD", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_X86_VSYSCALL_EMULATION", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_COMPAT_VDSO", "type": "kconfig", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_DRM_LEGACY", "type": "kconfig", "reason": "cut_attack_surface", "decision": "maintainer", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_FB", "type": "kconfig", "reason": "cut_attack_surface", "decision": "maintainer", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_VT", "type": "kconfig", "reason": "cut_attack_surface", "decision": "maintainer", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_BLK_DEV_FD", "type": "kconfig", "reason": "cut_attack_surface", "decision": "maintainer", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_BLK_DEV_FD_RAWCMD", "type": "kconfig", "reason": "cut_attack_surface", "decision": "maintainer", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT", "type": "kconfig", "reason": "cut_attack_surface", "decision": "maintainer", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_N_GSM", "type": "kconfig", "reason": "cut_attack_surface", "decision": "maintainer", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_ZSMALLOC_STAT", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_DEBUG_KMEMLEAK", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_BINFMT_AOUT", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_KPROBE_EVENTS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_UPROBE_EVENTS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_GENERIC_TRACER", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_FUNCTION_TRACER", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_STACK_TRACER", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_HIST_TRIGGERS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_BLK_DEV_IO_TRACE", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_PROC_VMCORE", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_PROC_PAGE_MONITOR", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_USELIB", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_CHECKPOINT_RESTORE", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_USERFAULTFD", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_HWPOISON_INJECT", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MEM_SOFT_DIRTY", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_DEVPORT", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_DEBUG_FS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_NOTIFIER_ERROR_INJECTION", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_FAIL_FUTEX", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_PUNIT_ATOM_DEBUG", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_ACPI_CONFIGFS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_EDAC_DEBUG", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_DRM_I915_DEBUG", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_DVB_C8SECTPFE", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MTD_SLRAM", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MTD_PHRAM", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_IO_URING", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_KCMP", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_RSEQ", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_LATENCYTOP", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_KCOV", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_PROVIDE_OHCI1394_DMA_INIT", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SUNRPC_DEBUG", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_X86_16BIT", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_BLK_DEV_UBLK", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SMB_SERVER", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_XFS_ONLINE_SCRUB_STATS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_CACHESTAT_SYSCALL", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_PREEMPTIRQ_TRACEPOINTS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_ENABLE_DEFAULT_TRACERS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_PROVE_LOCKING", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_TEST_DEBUG_VIRTUAL", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MPTCP", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_TLS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_TIPC", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_IP_SCTP", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_KGDB", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_PTDUMP_DEBUGFS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_X86_PTDUMP", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_DEBUG_CLOSURES", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_BCACHE_CLOSURES_DEBUG", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_STAGING", "type": "kconfig", "reason": "cut_attack_surface", "decision": "clipos", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_KSM", "type": "kconfig", "reason": "cut_attack_surface", "decision": "clipos", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_KALLSYMS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "clipos", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_KEXEC_FILE", "type": "kconfig", "reason": "cut_attack_surface", "decision": "clipos", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_CRASH_DUMP", "type": "kconfig", "reason": "cut_attack_surface", "decision": "clipos", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_USER_NS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "clipos", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_X86_CPUID", "type": "kconfig", "reason": "cut_attack_surface", "decision": "clipos", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_X86_IOPL_IOPERM", "type": "kconfig", "reason": "cut_attack_surface", "decision": "clipos", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_ACPI_TABLE_UPGRADE", "type": "kconfig", "reason": "cut_attack_surface", "decision": "clipos", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_EFI_CUSTOM_SSDT_OVERLAYS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "clipos", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_AIO", "type": "kconfig", "reason": "cut_attack_surface", "decision": "clipos", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MAGIC_SYSRQ", "type": "kconfig", "reason": "cut_attack_surface", "decision": "clipos", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MAGIC_SYSRQ_SERIAL", "type": "kconfig", "reason": "cut_attack_surface", "decision": "grapheneos", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_EFI_TEST", "type": "kconfig", "reason": "cut_attack_surface", "decision": "lockdown", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MMIOTRACE_TEST", "type": "kconfig", "reason": "cut_attack_surface", "decision": "lockdown", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_KPROBES", "type": "kconfig", "reason": "cut_attack_surface", "decision": "lockdown", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_BPF_SYSCALL", "type": "kconfig", "reason": "cut_attack_surface", "decision": "lockdown", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_MMIOTRACE", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_LIVEPATCH", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_IP_DCCP", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_FTRACE", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_VIDEO_VIVID", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_INPUT_EVBUG", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_CORESIGHT", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_XFS_SUPPORT_V4", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_BLK_DEV_WRITE_MOUNTED", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_FAULT_INJECTION", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_ARM_PTDUMP_DEBUGFS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_ARM_PTDUMP", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SECCOMP_CACHE_DEBUG", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_CRASH_DM_CRYPT", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_LKDTM", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_TRIM_UNUSED_KSYMS", "type": "kconfig", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_SYN_COOKIES", "type": "kconfig", "reason": "network_security", "decision": "defconfig", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_COREDUMP", "type": "kconfig", "reason": "harden_userspace", "decision": "clipos", "desired_val": "is not set", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_PROC_MEM_NO_FORCE", "type": "kconfig", "reason": "harden_userspace", "decision": "a13xp0p0v", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "CONFIG_ARCH_MMAP_RND_BITS", "type": "kconfig", "reason": "harden_userspace", "decision": "a13xp0p0v", "desired_val": "32", "check_result": "FAIL: is not found", "check_result_bool": false}, {"option_name": "CONFIG_ARCH_MMAP_RND_COMPAT_BITS", "type": "kconfig", "reason": "harden_userspace", "decision": "a13xp0p0v", "desired_val": "16", "check_result": "OK: CONFIG_COMPAT is \"is not set\"", "check_result_bool": true}, {"option_name": "CONFIG_X86_USER_SHADOW_STACK", "type": "kconfig", "reason": "harden_userspace", "decision": "kspp", "desired_val": "y", "check_result": "OK", "check_result_bool": true}, {"option_name": "nokaslr", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "FAIL: \"\"", "check_result_bool": false}, {"option_name": "no_hash_pointers", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "nosmep", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "nosmap", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "dis_ucode_ldr", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "setcpuid", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "clearcpuid", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "nopti", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "nospec_store_bypass_disable", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "nospectre_v1", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "nospectre_v2", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "nospectre_bhb", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "arm64.nobti", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "arm64.nopauth", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "arm64.nomte", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "arm64.nogcs", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "iommu.passthrough", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "rodata", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "on", "check_result": "OK", "check_result_bool": true}, {"option_name": "spectre_v2", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "FAIL: is off, not found", "check_result_bool": false}, {"option_name": "spectre_v2_user", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "FAIL: is off, not found", "check_result_bool": false}, {"option_name": "spectre_bhi", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "FAIL: is off, not found", "check_result_bool": false}, {"option_name": "spec_store_bypass_disable", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "FAIL: is off, not found", "check_result_bool": false}, {"option_name": "l1tf", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "FAIL: is off, not found", "check_result_bool": false}, {"option_name": "mds", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "OK: is not off, \"full,nosmt\"", "check_result_bool": true}, {"option_name": "tsx_async_abort", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "FAIL: is off, not found", "check_result_bool": false}, {"option_name": "srbds", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "FAIL: is off, not found", "check_result_bool": false}, {"option_name": "mmio_stale_data", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "FAIL: is off, not found", "check_result_bool": false}, {"option_name": "retbleed", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "FAIL: is off, not found", "check_result_bool": false}, {"option_name": "spec_rstack_overflow", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "FAIL: is off, not found", "check_result_bool": false}, {"option_name": "gather_data_sampling", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "FAIL: is off, not found", "check_result_bool": false}, {"option_name": "reg_file_data_sampling", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "FAIL: is off, not found", "check_result_bool": false}, {"option_name": "tsa", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "FAIL: is off, not found", "check_result_bool": false}, {"option_name": "indirect_target_selection", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "FAIL: is off, not found", "check_result_bool": false}, {"option_name": "vmscape", "type": "cmdline", "reason": "self_protection", "decision": "defconfig", "desired_val": "is not off", "check_result": "FAIL: is off, not found", "check_result_bool": false}, {"option_name": "slab_merge", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "slub_merge", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "page_alloc.shuffle", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "1", "check_result": "FAIL: is not found", "check_result_bool": false}, {"option_name": "hash_pointers", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "always", "check_result": "FAIL: is not found", "check_result_bool": false}, {"option_name": "slab_nomerge", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "is present", "check_result": "OK: is present", "check_result_bool": true}, {"option_name": "init_on_alloc", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "1", "check_result": "OK", "check_result_bool": true}, {"option_name": "init_on_free", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "1", "check_result": "OK", "check_result_bool": true}, {"option_name": "hardened_usercopy", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "1", "check_result": "OK: CONFIG_HARDENED_USERCOPY_DEFAULT_ON is \"y\"", "check_result_bool": true}, {"option_name": "slab_common.usercopy_fallback", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "kfence.sample_interval", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "100", "check_result": "OK: CONFIG_KFENCE_SAMPLE_INTERVAL is \"100\"", "check_result_bool": true}, {"option_name": "lockdown", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "confidentiality", "check_result": "OK: CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is \"y\"", "check_result_bool": true}, {"option_name": "module.sig_enforce", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "1", "check_result": "OK: CONFIG_MODULE_SIG_FORCE is \"y\"", "check_result_bool": true}, {"option_name": "efi", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "*disable_early_pci_dma*", "check_result": "OK: CONFIG_EFI is not found", "check_result_bool": true}, {"option_name": "randomize_kstack_offset", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "1", "check_result": "OK", "check_result_bool": true}, {"option_name": "mitigations", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "auto,nosmt", "check_result": "FAIL: is not found", "check_result_bool": false}, {"option_name": "intel_iommu", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "on", "check_result": "OK: CONFIG_INTEL_IOMMU_DEFAULT_ON is \"y\"", "check_result_bool": true}, {"option_name": "iommu.strict", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "1", "check_result": "OK: CONFIG_IOMMU_DEFAULT_DMA_STRICT is \"y\"", "check_result_bool": true}, {"option_name": "pti", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "on", "check_result": "OK", "check_result_bool": true}, {"option_name": "cfi", "type": "cmdline", "reason": "self_protection", "decision": "kspp", "desired_val": "kcfi", "check_result": "OK: CONFIG_CFI_AUTO_DEFAULT is \"is not set\"", "check_result_bool": true}, {"option_name": "iommu", "type": "cmdline", "reason": "self_protection", "decision": "clipos", "desired_val": "force", "check_result": "FAIL: is not found", "check_result_bool": false}, {"option_name": "tsx", "type": "cmdline", "reason": "cut_attack_surface", "decision": "defconfig", "desired_val": "off", "check_result": "OK: CONFIG_X86_INTEL_TSX_MODE_OFF is \"y\"", "check_result_bool": true}, {"option_name": "nosmt", "type": "cmdline", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "is present", "check_result": "FAIL: is not present", "check_result_bool": false}, {"option_name": "vsyscall", "type": "cmdline", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "none", "check_result": "OK", "check_result_bool": true}, {"option_name": "vdso32", "type": "cmdline", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "0", "check_result": "OK: CONFIG_COMPAT_VDSO is \"is not set\"", "check_result_bool": true}, {"option_name": "ia32_emulation", "type": "cmdline", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "0", "check_result": "OK: CONFIG_IA32_EMULATION is \"is not set\"", "check_result_bool": true}, {"option_name": "debugfs", "type": "cmdline", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "off", "check_result": "OK", "check_result_bool": true}, {"option_name": "sysrq_always_enabled", "type": "cmdline", "reason": "cut_attack_surface", "decision": "grapheneos", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "bdev_allow_write_mounted", "type": "cmdline", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "0", "check_result": "OK: CONFIG_BLK_DEV_WRITE_MOUNTED is \"is not set\"", "check_result_bool": true}, {"option_name": "norandmaps", "type": "cmdline", "reason": "harden_userspace", "decision": "defconfig", "desired_val": "is not set", "check_result": "OK: is not found", "check_result_bool": true}, {"option_name": "proc_mem.force_override", "type": "cmdline", "reason": "harden_userspace", "decision": "a13xp0p0v", "desired_val": "never", "check_result": "OK: CONFIG_PROC_MEM_NO_FORCE is \"y\"", "check_result_bool": true}, {"option_name": "net.core.bpf_jit_harden", "type": "sysctl", "reason": "self_protection", "decision": "kspp", "desired_val": "2", "check_result": "OK", "check_result_bool": true}, {"option_name": "vm.mmap_min_addr", "type": "sysctl", "reason": "self_protection", "decision": "kspp", "desired_val": "65536", "check_result": "OK", "check_result_bool": true}, {"option_name": "kernel.oops_limit", "type": "sysctl", "reason": "self_protection", "decision": "a13xp0p0v", "desired_val": "100", "check_result": "OK", "check_result_bool": true}, {"option_name": "kernel.warn_limit", "type": "sysctl", "reason": "self_protection", "decision": "a13xp0p0v", "desired_val": "100", "check_result": "OK", "check_result_bool": true}, {"option_name": "kernel.dmesg_restrict", "type": "sysctl", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "1", "check_result": "OK", "check_result_bool": true}, {"option_name": "kernel.perf_event_paranoid", "type": "sysctl", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "3", "check_result": "OK", "check_result_bool": true}, {"option_name": "dev.tty.ldisc_autoload", "type": "sysctl", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "kernel.kptr_restrict", "type": "sysctl", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "2", "check_result": "OK", "check_result_bool": true}, {"option_name": "dev.tty.legacy_tiocsti", "type": "sysctl", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "user.max_user_namespaces", "type": "sysctl", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "kernel.kexec_load_disabled", "type": "sysctl", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "1", "check_result": "OK", "check_result_bool": true}, {"option_name": "kernel.unprivileged_bpf_disabled", "type": "sysctl", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "1", "check_result": "OK", "check_result_bool": true}, {"option_name": "vm.unprivileged_userfaultfd", "type": "sysctl", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "kernel.modules_disabled", "type": "sysctl", "reason": "cut_attack_surface", "decision": "kspp", "desired_val": "1", "check_result": "FAIL: \"0\"", "check_result_bool": false}, {"option_name": "kernel.io_uring_disabled", "type": "sysctl", "reason": "cut_attack_surface", "decision": "grsec", "desired_val": "2", "check_result": "OK", "check_result_bool": true}, {"option_name": "kernel.sysrq", "type": "sysctl", "reason": "cut_attack_surface", "decision": "a13xp0p0v", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "net.ipv4.icmp_ignore_bogus_error_responses", "type": "sysctl", "reason": "network_security", "decision": "cis", "desired_val": "1", "check_result": "FAIL: is not found", "check_result_bool": false}, {"option_name": "net.ipv4.icmp_echo_ignore_broadcasts", "type": "sysctl", "reason": "network_security", "decision": "cis", "desired_val": "1", "check_result": "OK", "check_result_bool": true}, {"option_name": "net.ipv4.conf.all.accept_redirects", "type": "sysctl", "reason": "network_security", "decision": "cis", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "net.ipv4.conf.default.accept_redirects", "type": "sysctl", "reason": "network_security", "decision": "cis", "desired_val": "0", "check_result": "FAIL: \"1\"", "check_result_bool": false}, {"option_name": "net.ipv6.conf.all.accept_redirects", "type": "sysctl", "reason": "network_security", "decision": "cis", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "net.ipv6.conf.default.accept_redirects", "type": "sysctl", "reason": "network_security", "decision": "cis", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "net.ipv4.conf.all.accept_source_route", "type": "sysctl", "reason": "network_security", "decision": "cis", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "net.ipv4.conf.default.accept_source_route", "type": "sysctl", "reason": "network_security", "decision": "cis", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "net.ipv6.conf.all.accept_source_route", "type": "sysctl", "reason": "network_security", "decision": "cis", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "net.ipv6.conf.default.accept_source_route", "type": "sysctl", "reason": "network_security", "decision": "cis", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "net.ipv4.tcp_syncookies", "type": "sysctl", "reason": "network_security", "decision": "cis", "desired_val": "1", "check_result": "OK", "check_result_bool": true}, {"option_name": "net.ipv6.conf.all.accept_ra", "type": "sysctl", "reason": "network_security", "decision": "cis", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "net.ipv6.conf.default.accept_ra", "type": "sysctl", "reason": "network_security", "decision": "cis", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "fs.protected_symlinks", "type": "sysctl", "reason": "harden_userspace", "decision": "kspp", "desired_val": "1", "check_result": "OK", "check_result_bool": true}, {"option_name": "fs.protected_hardlinks", "type": "sysctl", "reason": "harden_userspace", "decision": "kspp", "desired_val": "1", "check_result": "OK", "check_result_bool": true}, {"option_name": "fs.protected_fifos", "type": "sysctl", "reason": "harden_userspace", "decision": "kspp", "desired_val": "2", "check_result": "OK", "check_result_bool": true}, {"option_name": "fs.protected_regular", "type": "sysctl", "reason": "harden_userspace", "decision": "kspp", "desired_val": "2", "check_result": "OK", "check_result_bool": true}, {"option_name": "fs.suid_dumpable", "type": "sysctl", "reason": "harden_userspace", "decision": "kspp", "desired_val": "0", "check_result": "OK", "check_result_bool": true}, {"option_name": "kernel.randomize_va_space", "type": "sysctl", "reason": "harden_userspace", "decision": "kspp", "desired_val": "2", "check_result": "OK", "check_result_bool": true}, {"option_name": "kernel.yama.ptrace_scope", "type": "sysctl", "reason": "harden_userspace", "decision": "kspp", "desired_val": "3", "check_result": "OK", "check_result_bool": true}, {"option_name": "vm.mmap_rnd_bits", "type": "sysctl", "reason": "harden_userspace", "decision": "a13xp0p0v", "desired_val": "32", "check_result": "OK", "check_result_bool": true}, {"option_name": "vm.mmap_rnd_compat_bits", "type": "sysctl", "reason": "harden_userspace", "decision": "a13xp0p0v", "desired_val": "16", "check_result": "OK: CONFIG_COMPAT is \"is not set\"", "check_result_bool": true}]