Ignore kernel.modules_disabled if CONFIG_MODULES is not set

[jo-so]

We are using no modules for our kernel (CONFIG_MODULES=n) which removes /proc/sys/kernel/modules_disabled. This makes this check fail:

+kernel.modules_disabled                 |sysctl |     1      |   kspp   |cut_attack_surface| FAIL: is not found

We are using version f4dbe25.

[a13xp0p0v]

Hello @jo-so,

It looks like v0.6.10 contains the commit 7a85a7f, which solves your issue.

But it can work only if you check sysctl together with kconfig. Without the kconfig file, kernel-hardening-checker can't know that your kernel has disabled CONFIG_MODULES.

Could you please try the tool both with -c and -s?

I guess in this case there is no false check.