a13xp0p0v/kernel-hardening-checker

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2123 stars · 190 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Python CLI tool that checks the security hardening options of the Linux kernel across Kconfig options, boot command line arguments, and sysctl parameters. It provides recommendations based on KSPP settings, maintainer feedback, grsecurity, and CLIP OS configurations for multiple architectures.

Use cases

• audit linux kernel config for security hardening
• check kernel command line boot arguments are hardened
• verify sysctl security settings at runtime
• compare kernel config against KSPP recommended settings
• harden a custom linux kernel build
• generate hardening recommendations for x86_64 or arm64

When to choose

• you need to audit compile-time, boot-time, and runtime kernel hardening in one tool
• you build custom kernels and want automated hardening checks
• you want recommendations based on KSPP, grsecurity, and CLIP OS baselines

When to avoid

• you need full vulnerability scanning or CVE detection rather than config hardening checks
• you need a hardening tool for non-Linux operating systems
• you want automatic remediation rather than a check/report tool

Facets

cli-tool · maturity active

security vulnerability-scanning configuration-management cli security operating-systems developer-tools python cli kernel-hardening kconfig linux-kernel security-audit sysctl boot-parameters linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="a13xp0p0v/kernel-hardening-checker")