Re: [PATCH] docs: add system-state document to admin-guide

From: Bagas Sanjaya
Date: Wed Mar 22 2023 - 05:30:07 EST


On Tue, Mar 21, 2023 at 05:18:16PM -0600, Shuah Khan wrote:
> +scripts/checksyscalls.sh can be used to check if current architecture is
> +missing any function calls compared to i386.

i386 is the reference architecture for comparing syscalls, right?

> +This scripts parses Documentation/features to find the support status
> +information. It can be used to validate the contents of the files under
> +Documentation/features or simply list.::

"... to validate contents of Documentation/features files or simply list
them::"

> +Let's do one last sanity check on the system to see if the following two
> +command outputs match. If they don't examine your system closely. kernel
> +rootkits install their own ps, find, etc. utilities to mask their activity.
> +The outputs match on my system. Do they on yours?
> +
> +ps ax | wc -l
> +ls -d /proc/* | grep [0-9]|wc -l

The shell snippet above should be in a code block for consistency
with other snippets.

> +Linux kernel supports several hardening options to make system secure.
> +kconfig-hardened-check tool sanity checks kernel configuration for
> +security. You can checkout the latest::

"... If you don't have the tool handy, you can clone the repository::"

> + * https://docs.kernel.org/trace/index.html

Shouldn't the last ref be internal link (Documentation/trace/index.rst)?

Thanks.

--
An old man doll... just what I always wanted! - Clara

Attachment: signature.asc
Description: PGP signature