Bug#944476: LKRG Debian packaging completed
Linux Kernel Runtime Guard (LKRG) protects the kernel. It provides
security through diversity. Similar to running an uncommon operating
system (kernel) would.
It renders whole classes of kernel exploits ineffective. Makes other
exploits less reliable and more difficult to write (see features and
security). LKRG was developed by a security professional with review
from other high profile security professionals (see authorship).
- https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG#Features
- https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG#Security
- https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG#Authorship
Packaging completed. Lintian --pedantic warning free. Build using
cowbuilder successful. Module will be compiled on machine were installed
using DKMS.
I am not a Debian Developer (DD). This needs a DD to be uploaded to
packages.debian.org.
The source code, /debian folder can be found here:
https://github.com/Whonix/lkrg
The website for the LKRG Debian Package Fork can be found here:
https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG
Build instructions with software signature verification:
https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG/Build_Debian_Package_from_Source_Code
Simpler build instructions without software signature verification:
https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG/Build_Debian_Package_from_Source_Code/Easy
Other references:
- development discussion
- LKRG compilation hardening flags, checksec, hardening-check
- LKRG packagers / downstream wishlist (signed git commits, signed git
tags, version numbers, logo)
- module loading / systemd bug report / suggestion
- LKRG kills VirtualBox host VMs
- announcement of this LKRG Debian package on upstream LKRG mailing list
https://forums.whonix.org/t/linux-kernel-runtime-guard-lkrg-linux-kernel-runtime-integrity-checking-and-exploit-detection/8477
https://www.openwall.com/lists/lkrg-users/2019/11/18/3
https://www.openwall.com/lists/lkrg-users/2019/11/13/5
https://www.openwall.com/lists/lkrg-users/2019/11/10/2
https://www.openwall.com/lists/lkrg-users/2019/11/18/1
https://www.openwall.com/lists/lkrg-users/2019/11/18/2
Reply to: