Kernel Hardening

Purpose

Audit kernel security configuration for memory protection, syscall surface reduction, integrity mechanisms, and overall hardening completeness against both local and remote attack vectors.

Scope Constraints

Reads kernel configuration files, boot parameters, and system runtime settings. Does not modify kernel configuration or execute system commands. Does not access production kernels.

Inputs

• Kernel configuration (Kconfig/.config or equivalent)
• Target platform and architecture (x86_64, ARM64, RISC-V)
• Threat model (local unprivileged attacker, remote attacker, physical attacker)
• Deployment context (server, embedded, mobile, desktop)
• Compliance requirements (STIG, CIS benchmarks)

Input Sanitization

No user-provided values are used in commands or file paths. All inputs are treated as read-only analysis targets.