KERNEL-HARDENING-CHECKER

Summary from the TLDR InfoSec newsletter

kernel-hardening-checker (formerly kconfig-hardened-check) is a tool for checking the security hardening options of the Linux kernel. It supports checking Kconfig options, sysctl parameters, and boot configs. The repository also contains a map of kernel configuration options and vulnerability classes.