Skip to content

Commit 1a95a92

Browse files
author
RageLtMan
committed
Kernel Hardening: Linux Kernel Runtime Guard
Import the Linux Kernel Runtime Guard (LKRG) from OpenWall by Adam Zabrocki and and Alex Peslyak. LKRG provides additional tiers of mitigation by actively hashing and validating kernel memory regions, further restricting access to common LPE and escape vectors, as well as mechanisms for modifying the running kernel commonly used to bypass LSMs. LKRG can be built directly into the kernel to provide enforcement from early-boot, but should be deployed as a module initially while tunables and operational stability are ironed out and validated on this platform. More information is available at the projects homepage: https://www.openwall.com/lkrg/ and in their source repo: https://github.com/openwall/lkrg
1 parent a32997c commit 1a95a92

File tree

1 file changed

+20597
-0
lines changed

1 file changed

+20597
-0
lines changed

0 commit comments

Comments
 (0)