kernel-hardening-checker is a tool for checking the security hardening options of the Linux kernel. Provided preferences are based on suggestions from various sources, including:

• KSPP recommended settings

• CLIP OS kernel configuration

• Last public grsecurity patch (options which they disable)

• SECURITY_LOCKDOWN_LSM patchset

• Direct feedback from the Linux kernel maintainers

This tool supports checking Kconfig options and kernel cmdline parameters.

A simple shell script to tell if your Linux installation is vulnerable against the 3 “speculative execution” CVEs that were made public early 2018.

Without options, it'll inspect your currently running kernel. You can also specify a kernel image on the command line, if you'd like to inspect a kernel you're not running.

The script will do its best to detect mitigations, including backported non-vanilla patches, regardless of the advertised kernel version number.

Documentation at https://melpa.org/#/flycheck-checkpatch

This package provides a pytest plugin that checks URLs for HTML-containing files.

This package is probably useless outside of internal HashiCorp use. It is open source for disclosure and because HashiCorp's open source projects must be able to link to it.

Check your wheels have the right contents.

Documentation at https://melpa.org/#/flycheck-checkbashisms

Provides commands to help open external terminal emulators in the directory of the current buffer.

Firejail is a SUID sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces, seccomp-bpf and Linux capabilities. The software includes sandbox profiles for a number of common Linux programs. Firejail should be added to the list of setuid programs in the system configuration to work properly. Builded with --disable-sandbox-check, which is only intended for development.

Git is a free distributed version control system designed to handle everything from small to very large projects with speed and efficiency.

This pacakge provides bindings for CRIU. The code is based on the Go-based PHaul implementation from the CRIU repository.

This pacakge provides bindings for CRIU. The code is based on the Go-based PHaul implementation from the CRIU repository.