<?xml version='1.0' encoding='UTF-8'?>
<testsuite name="KCA_Plugin" tests="88"><testcase classname="Hardening options" name="CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE"><failure message="current=CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE is not set, recommended=CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE is y" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_ARCH_HAS_DEBUG_STRICT_USER_COPY_CHECKS" /><testcase classname="Hardening options" name="CONFIG_BINFMT_MISC"><failure message="current=CONFIG_BINFMT_MISC is m, recommended=CONFIG_BINFMT_MISC is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_BPF_JIT" /><testcase classname="Hardening options" name="CONFIG_BUG"><failure message="current=CONFIG_BUG is y, recommended=CONFIG_BUG is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_CC_STACKPROTECTOR"><failure message="current=CONFIG_CC_STACKPROTECTOR is not set, recommended=CONFIG_CC_STACKPROTECTOR is y" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_CHECKPOINT_RESTORE" /><testcase classname="Hardening options" name="CONFIG_CMDLINE" /><testcase classname="Hardening options" name="CONFIG_CMDLINE_BOOL"><failure message="current=CONFIG_CMDLINE_BOOL is not set, recommended=CONFIG_CMDLINE_BOOL is y" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_CMDLINE_OVERRIDE"><failure message="current=CONFIG_CMDLINE_OVERRIDE is not set, recommended=CONFIG_CMDLINE_OVERRIDE is y" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_COREDUMP"><failure message="current=CONFIG_COREDUMP is y, recommended=CONFIG_COREDUMP is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_CROSS_MEMORY_ATTACH"><failure message="current=CONFIG_CROSS_MEMORY_ATTACH is y, recommended=CONFIG_CROSS_MEMORY_ATTACH is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_DEBUG_BUGVERBOSE"><failure message="current=CONFIG_DEBUG_BUGVERBOSE is y, recommended=CONFIG_DEBUG_BUGVERBOSE is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_DEBUG_FS"><failure message="current=CONFIG_DEBUG_FS is y, recommended=CONFIG_DEBUG_FS is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_DEBUG_INFO"><failure message="current=CONFIG_DEBUG_INFO is y, recommended=CONFIG_DEBUG_INFO is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_DEBUG_KERNEL"><failure message="current=CONFIG_DEBUG_KERNEL is y, recommended=CONFIG_DEBUG_KERNEL is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_DEBUG_RODATA" /><testcase classname="Hardening options" name="CONFIG_DEBUG_STACKOVERFLOW"><failure message="current=CONFIG_DEBUG_STACKOVERFLOW is not set, recommended=CONFIG_DEBUG_STACKOVERFLOW is y" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_DEBUG_STRICT_USER_COPY_CHECKS" /><testcase classname="Hardening options" name="CONFIG_DEFAULT_MMAP_MIN_ADDR"><failure message="current=CONFIG_DEFAULT_MMAP_MIN_ADDR is 4096, recommended=CONFIG_DEFAULT_MMAP_MIN_ADDR is 65536" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_DEVKMEM"><failure message="current=CONFIG_DEVKMEM is y, recommended=CONFIG_DEVKMEM is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_DEVMEM"><failure message="current=CONFIG_DEVMEM is y, recommended=CONFIG_DEVMEM is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_FTRACE"><failure message="current=CONFIG_FTRACE is y, recommended=CONFIG_FTRACE is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_FW_LOADER_USER_HELPER" /><testcase classname="Hardening options" name="CONFIG_IKCONFIG"><failure message="current=CONFIG_IKCONFIG is y, recommended=CONFIG_IKCONFIG is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_IKCONFIG_PROC"><failure message="current=CONFIG_IKCONFIG_PROC is y, recommended=CONFIG_IKCONFIG_PROC is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_IP_PNP"><failure message="current=CONFIG_IP_PNP is y, recommended=CONFIG_IP_PNP is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_KALLSYMS"><failure message="current=CONFIG_KALLSYMS is y, recommended=CONFIG_KALLSYMS is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_KALLSYMS_ALL"><failure message="current=CONFIG_KALLSYMS_ALL is y, recommended=CONFIG_KALLSYMS_ALL is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_KEXEC" /><testcase classname="Hardening options" name="CONFIG_KGDB"><failure message="current=CONFIG_KGDB is y, recommended=CONFIG_KGDB is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_KPROBES"><failure message="current=CONFIG_KPROBES is y, recommended=CONFIG_KPROBES is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_MAGIC_SYSRQ"><failure message="current=CONFIG_MAGIC_SYSRQ is y, recommended=CONFIG_MAGIC_SYSRQ is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_MODULE_FORCE_LOAD" /><testcase classname="Hardening options" name="CONFIG_MODULE_SIG_FORCE"><failure message="current=CONFIG_MODULE_SIG_FORCE is not set, recommended=CONFIG_MODULE_SIG_FORCE is y" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_MODULE_UNLOAD"><failure message="current=CONFIG_MODULE_UNLOAD is y, recommended=CONFIG_MODULE_UNLOAD is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_NAMESPACES"><failure message="current=CONFIG_NAMESPACES is y, recommended=CONFIG_NAMESPACES is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_NFSD"><failure message="current=CONFIG_NFSD is m, recommended=CONFIG_NFSD is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_NFS_FS"><failure message="current=CONFIG_NFS_FS is y, recommended=CONFIG_NFS_FS is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_OPROFILE"><failure message="current=CONFIG_OPROFILE is y, recommended=CONFIG_OPROFILE is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_PACKET_DIAG" /><testcase classname="Hardening options" name="CONFIG_PANIC_ON_OOPS"><failure message="current=CONFIG_PANIC_ON_OOPS is not set, recommended=CONFIG_PANIC_ON_OOPS is y" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_PROC_KCORE"><failure message="current=CONFIG_PROC_KCORE is y, recommended=CONFIG_PROC_KCORE is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_PROFILING"><failure message="current=CONFIG_PROFILING is y, recommended=CONFIG_PROFILING is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_RANDOMIZE_BASE"><failure message="current=CONFIG_RANDOMIZE_BASE is not set, recommended=CONFIG_RANDOMIZE_BASE is y" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_RANDOMIZE_BASE_MAX_OFFSET"><failure message="current=CONFIG_RANDOMIZE_BASE_MAX_OFFSET is not set, recommended=CONFIG_RANDOMIZE_BASE_MAX_OFFSET is 0x20000000,0x40000000" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_SECURITY_DMESG_RESTRICT"><failure message="current=CONFIG_SECURITY_DMESG_RESTRICT is not set, recommended=CONFIG_SECURITY_DMESG_RESTRICT is y" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_SERIAL_8250_CONSOLE"><failure message="current=CONFIG_SERIAL_8250_CONSOLE is y, recommended=CONFIG_SERIAL_8250_CONSOLE is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_SERIAL_CORE"><failure message="current=CONFIG_SERIAL_CORE is y, recommended=CONFIG_SERIAL_CORE is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_SERIAL_CORE_CONSOLE"><failure message="current=CONFIG_SERIAL_CORE_CONSOLE is y, recommended=CONFIG_SERIAL_CORE_CONSOLE is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_STRICT_DEVMEM"><failure message="current=CONFIG_STRICT_DEVMEM is not set, recommended=CONFIG_STRICT_DEVMEM is y" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_SWAP"><failure message="current=CONFIG_SWAP is y, recommended=CONFIG_SWAP is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_SYSCTL_SYSCALL" /><testcase classname="Hardening options" name="CONFIG_UNIX_DIAG" /><testcase classname="Hardening options" name="CONFIG_USELIB"><failure message="current=CONFIG_USELIB is y, recommended=CONFIG_USELIB is not set" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_X86_INTEL_MPX"><failure message="current=CONFIG_X86_INTEL_MPX is not set, recommended=CONFIG_X86_INTEL_MPX is y" type="violation" /></testcase><testcase classname="Hardening options" name="CONFIG_X86_MSR"><failure message="current=CONFIG_X86_MSR is y, recommended=CONFIG_X86_MSR is not set" type="violation" /></testcase><testcase classname="Key-related options" name="CONFIG_ENCRYPTED_KEYS"><failure message="current=CONFIG_ENCRYPTED_KEYS is not set, recommended=CONFIG_ENCRYPTED_KEYS is y" type="violation" /></testcase><testcase classname="Key-related options" name="CONFIG_KEYS" /><testcase classname="Key-related options" name="CONFIG_KEYS_DEBUG_PROC_KEYS" /><testcase classname="Key-related options" name="CONFIG_TRUSTED_KEYS"><failure message="current=CONFIG_TRUSTED_KEYS is not set, recommended=CONFIG_TRUSTED_KEYS is y" type="violation" /></testcase><testcase classname="Security options" name="CONFIG_DEFAULT_SECURITY" /><testcase classname="Security options" name="CONFIG_INTEL_TXT"><failure message="current=CONFIG_INTEL_TXT is not set, recommended=CONFIG_INTEL_TXT is y" type="violation" /></testcase><testcase classname="Security options" name="CONFIG_LSM_MMAP_MIN_ADDR"><failure message="current=CONFIG_LSM_MMAP_MIN_ADDR is not set, recommended=CONFIG_LSM_MMAP_MIN_ADDR is 65536" type="violation" /></testcase><testcase classname="Security options" name="CONFIG_SECURITY" /><testcase classname="Security options" name="CONFIG_SECURITYFS"><failure message="current=CONFIG_SECURITYFS is not set, recommended=CONFIG_SECURITYFS is y" type="violation" /></testcase><testcase classname="Security options" name="CONFIG_SECURITY_APPARMOR" /><testcase classname="Security options" name="CONFIG_SECURITY_NETWORKING"><failure message="current=CONFIG_SECURITY_NETWORKING is not set, recommended=CONFIG_SECURITY_NETWORKING is y" type="violation" /></testcase><testcase classname="Security options" name="CONFIG_SECURITY_SELINUX" /><testcase classname="Security options" name="CONFIG_SECURITY_SMACK" /><testcase classname="Security options" name="CONFIG_SECURITY_TOMOYO" /><testcase classname="Security options" name="CONFIG_SECURITY_YAMA"><failure message="current=CONFIG_SECURITY_YAMA is not set, recommended=CONFIG_SECURITY_YAMA is y" type="violation" /></testcase><testcase classname="Security options" name="CONFIG_SECURITY_YAMA_STACKED"><failure message="current=CONFIG_SECURITY_YAMA_STACKED is not set, recommended=CONFIG_SECURITY_YAMA_STACKED is y" type="violation" /></testcase><testcase classname="Integrity options" name="CONFIG_EVM"><failure message="current=CONFIG_EVM is not set, recommended=CONFIG_EVM is y" type="violation" /></testcase><testcase classname="Integrity options" name="CONFIG_EVM_ATTR_FSUUID"><failure message="current=CONFIG_EVM_ATTR_FSUUID is not set, recommended=CONFIG_EVM_ATTR_FSUUID is y" type="violation" /></testcase><testcase classname="Integrity options" name="CONFIG_EVM_EXTRA_SMACK_XATTRS"><failure message="current=CONFIG_EVM_EXTRA_SMACK_XATTRS is not set, recommended=CONFIG_EVM_EXTRA_SMACK_XATTRS is y" type="violation" /></testcase><testcase classname="Integrity options" name="CONFIG_IMA"><failure message="current=CONFIG_IMA is not set, recommended=CONFIG_IMA is y" type="violation" /></testcase><testcase classname="Integrity options" name="CONFIG_IMA_APPRAISE"><failure message="current=CONFIG_IMA_APPRAISE is not set, recommended=CONFIG_IMA_APPRAISE is y" type="violation" /></testcase><testcase classname="Integrity options" name="CONFIG_IMA_APPRAISE_SIGNED_INIT"><failure message="current=CONFIG_IMA_APPRAISE_SIGNED_INIT is not set, recommended=CONFIG_IMA_APPRAISE_SIGNED_INIT is y" type="violation" /></testcase><testcase classname="Integrity options" name="CONFIG_IMA_DEFAULT_HASH_SHA1" /><testcase classname="Integrity options" name="CONFIG_IMA_DEFAULT_HASH_SHA256"><failure message="current=CONFIG_IMA_DEFAULT_HASH_SHA256 is not set, recommended=CONFIG_IMA_DEFAULT_HASH_SHA256 is y" type="violation" /></testcase><testcase classname="Integrity options" name="CONFIG_IMA_DEFAULT_HASH_SHA512"><failure message="current=CONFIG_IMA_DEFAULT_HASH_SHA512 is not set, recommended=CONFIG_IMA_DEFAULT_HASH_SHA512 is y" type="violation" /></testcase><testcase classname="Integrity options" name="CONFIG_IMA_DEFAULT_HASH_WP512" /><testcase classname="Integrity options" name="CONFIG_IMA_LSM_RULES"><failure message="current=CONFIG_IMA_LSM_RULES is not set, recommended=CONFIG_IMA_LSM_RULES is y" type="violation" /></testcase><testcase classname="Integrity options" name="CONFIG_IMA_TRUSTED_KEYRING"><failure message="current=CONFIG_IMA_TRUSTED_KEYRING is not set, recommended=CONFIG_IMA_TRUSTED_KEYRING is y" type="violation" /></testcase><testcase classname="Integrity options" name="CONFIG_INTEGRITY" /><testcase classname="Integrity options" name="CONFIG_INTEGRITY_AUDIT"><failure message="current=CONFIG_INTEGRITY_AUDIT is not set, recommended=CONFIG_INTEGRITY_AUDIT is y" type="violation" /></testcase><testcase classname="Integrity options" name="CONFIG_INTEGRITY_SIGNATURE"><failure message="current=CONFIG_INTEGRITY_SIGNATURE is not set, recommended=CONFIG_INTEGRITY_SIGNATURE is y" type="violation" /></testcase></testsuite>