Skip to content

Commit

Permalink
Kernel Hardening: Linux Kernel Runtime Guard
Browse files Browse the repository at this point in the history
Import the Linux Kernel Runtime Guard (LKRG) from OpenWall by Adam
Zabrocki and and Alex Peslyak.

LKRG provides additional tiers of mitigation by actively hashing
and validating kernel memory regions, further restricting access
to common LPE and escape vectors, as well as mechanisms for
modifying the running kernel commonly used to bypass LSMs. LKRG
can be built directly into the kernel to provide enforcement from
early-boot, but should be deployed as a module initially while
tunables and operational stability are ironed out and validated on
this platform. More information is available at the projects
homepage: https://www.openwall.com/lkrg/ and in their source repo:
https://github.com/openwall/lkrg
  • Loading branch information
RageLtMan committed Apr 19, 2021
1 parent ce0c191 commit 82a75c0
Showing 1 changed file with 20,597 additions and 0 deletions.

0 comments on commit 82a75c0

Please sign in to comment.