Linux Kernel Runtime Guard (LKRG) protects the kernel. It provides security through diversity. Similar to running an uncommon operating system (kernel) would.
It renders whole classes of kernel exploits ineffective. Makes other exploits less reliable and more difficult to write (see features and security). LKRG was developed by a security professional with review from other high profile security professionals (see authorship). - https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG#Features - https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG#Security - https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG#Authorship Packaging completed. Lintian --pedantic warning free. Build using cowbuilder successful. Module will be compiled on machine were installed using DKMS. I am not a Debian Developer (DD). This needs a DD to be uploaded to packages.debian.org. The source code, /debian folder can be found here: https://github.com/Whonix/lkrg The website for the LKRG Debian Package Fork can be found here: https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG Build instructions with software signature verification: https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG/Build_Debian_Package_from_Source_Code Simpler build instructions without software signature verification: https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG/Build_Debian_Package_from_Source_Code/Easy Other references: - development discussion - LKRG compilation hardening flags, checksec, hardening-check - LKRG packagers / downstream wishlist (signed git commits, signed git tags, version numbers, logo) - module loading / systemd bug report / suggestion - LKRG kills VirtualBox host VMs - announcement of this LKRG Debian package on upstream LKRG mailing list https://forums.whonix.org/t/linux-kernel-runtime-guard-lkrg-linux-kernel-runtime-integrity-checking-and-exploit-detection/8477 https://www.openwall.com/lists/lkrg-users/2019/11/18/3 https://www.openwall.com/lists/lkrg-users/2019/11/13/5 https://www.openwall.com/lists/lkrg-users/2019/11/10/2 https://www.openwall.com/lists/lkrg-users/2019/11/18/1 https://www.openwall.com/lists/lkrg-users/2019/11/18/2
