# a13xp0p0v/kernel-hardening-checker

A tool for checking the security hardening options of the Linux kernel

Repository: https://github.com/a13xp0p0v/kernel-hardening-checker
Canonical: https://ross.abutalabs.com/products/kernel-hardening-checker
Language: Python
License: GPL-3.0
License Family: copyleft
Last push: 2026-08-16T14:33:30+00:00

## Health v2 (maintenance only)
Score: 76/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 98, release rhythm 35, longevity 100
- inputs: {"age_days": 2997, "days_push": 17, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2123, forks 190 (observed 2026-08-28T04:06:16.736952+00:00)

## What it is
A Python CLI tool that checks the security hardening options of the Linux kernel across Kconfig options, boot command line arguments, and sysctl parameters. It provides recommendations based on KSPP settings, maintainer feedback, grsecurity, and CLIP OS configurations for multiple architectures.

## Use cases
- audit linux kernel config for security hardening
- check kernel command line boot arguments are hardened
- verify sysctl security settings at runtime
- compare kernel config against KSPP recommended settings
- harden a custom linux kernel build
- generate hardening recommendations for x86_64 or arm64

## When to choose
- you need to audit compile-time, boot-time, and runtime kernel hardening in one tool
- you build custom kernels and want automated hardening checks
- you want recommendations based on KSPP, grsecurity, and CLIP OS baselines

## When to avoid
- you need full vulnerability scanning or CVE detection rather than config hardening checks
- you need a hardening tool for non-Linux operating systems
- you want automatic remediation rather than a check/report tool

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, vulnerability-scanning, configuration-management, cli
- domain: security, operating-systems, developer-tools
- platform: python, cli
- tags: kernel-hardening, kconfig, linux-kernel, security-audit, sysctl, boot-parameters, linux

## Member repositories
- a13xp0p0v/kernel-hardening-checker (main) score 76

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:16.736952+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:52:49.586758+00:00, confidence not recorded.
  - readme: https://github.com/a13xp0p0v/kernel-hardening-checker (fetched 2026-08-28T04:06:16.736952+00:00, sha 3a352311c036)
- Data as of 2026-08-30T08:39:29.467469+00:00.