kernel-6.5/lkrg: Bump v.0.9.7

packages/kernels/6.5/lkrg/build.yaml

@@ -0,0 +1,45 @@
+requires:
+  - name: "kernel"
+    category: "seed-6.5"
+    version: ">=0"
+env:
+- FEATURES="-sandbox -usersandbox -ipc-sandbox -pid-sandbox -network-sandbox"
+package_dir: /{{ .Values.name }}
+steps:
+- >-
+  luet i -y --sync-repos kernel-6.1/macaroni-modules app-antivirus/lkrg --nodeps && luet cleanup &&
+  cd /lib/modules/{{ ( index .Values.labels "kernel.version" ) }}-{{ ( index .Values.labels "kernel.suffix" ) }} &&
+  ln -s /usr/src/linux-{{ ( index .Values.labels "kernel.version" ) }}-{{ ( index .Values.labels "kernel.suffix" ) }} build
+- >-
+  epro list &&
+  {{- if .Values.use_flags }}
+  USE="{{ join " " .Values.use_flags }}" emerge {{ ( index .Values.labels "emerge.packages" ) }} -pv -t
+  {{- else }}
+  emerge -j ${JOBS} {{ ( index .Values.labels "emerge.packages" ) }} -pv -t
+  {{- end }}
+- |
+  {{- if .Values.use_flags }}
+  USE="{{ join " " .Values.use_flags }}" emerge {{ ( index .Values.labels "emerge.packages" ) }}
+  {{- else }}
+  emerge -j ${JOBS} {{ ( index .Values.labels "emerge.packages" ) }}
+  {{- end }}
+- |
+  eval 'rm -rf /{{ .Values.name }} || true' && mkdir /{{ .Values.name }} && \
+  luet-portage --dir /{{ .Values.name }} {{ ( index .Values.labels "emerge.packages" ) }}
+
+# It seems that the compression is not handled correct from the ebuild
+# I run manually compression for every module
+- >-
+  for i in /{{ .Values.name }}/lib/modules/{{ ( index .Values.labels "kernel.version" ) }}-macaroni/misc/*.ko ; do
+  zstd ${i} -o ${i}.zst --rm ;
+  done
+
+
+excludes:
+# Funtoo/Portage stuff
+- ^/var/db/pkg/
+- ^/var/cache/portage/
+- ^/var/git/
+- ^/etc/.*
+# Devel files
+#- ^/usr/include

packages/kernels/6.5/lkrg/cgroup-releas-agent.patch

@@ -0,0 +1,20 @@
+commit 264747411860f6ef5ce7979ee054e0b72a9e83c9
+Author: mrl5 <31549762+mrl5@users.noreply.github.com>
+Date:   Mon Sep 5 21:11:11 2022 +0200
+
+    fix: umh - allow openrc cgroup release agent [#230]
+
+    closes #230
+
+diff --git a/src/modules/exploit_detection/syscalls/p_call_usermodehelper/p_call_usermodehelper.c b/src/modules/exploit_detection/syscalls/p_call_usermodehelper/p_call_usermodehelper.c
+index 43d9b3f..7e3f335 100644
+--- a/src/modules/exploit_detection/syscalls/p_call_usermodehelper/p_call_usermodehelper.c
++++ b/src/modules/exploit_detection/syscalls/p_call_usermodehelper/p_call_usermodehelper.c
+@@ -44,6 +44,7 @@ static const char * const p_umh_global[] = {
+    "/bin/true",
+    "/etc/acpi/events/RadioPower.sh",
+    "/etc/acpi/wireless-rtl-ac-dc-power.sh",
++   "/lib/rc/sh/cgroup-release-agent.sh",
+    "/lib/systemd/systemd-cgroups-agent",
+    "/lib/systemd/systemd-coredump",
+    "/sbin/bridge-stp",

packages/kernels/6.5/lkrg/definition.yaml

@@ -0,0 +1,9 @@
+name: lkrg
+version: 0.9.7
+category: kernel-6.5
+annotations:
+  kernel_module: true
+labels:
+  emerge.packages: app-antivirus/lkrg
+  kernel.suffix: macaroni
+  kernel.version: 6.5.8

packages/kernels/6.5/lkrg/finalize.yaml

@@ -0,0 +1,6 @@
+install:
+- >-
+  depmod -a {{ ( index .Values.labels "kernel.version" ) }}-{{ ( index .Values.labels "kernel.suffix" ) }} || true
+shell:
+  - bash
+  - -c