Name: pi3 (pi3ki31ny)
Nationality: Polish
Contact: pi3@itsec.pl

---------------------------------------------------------------------------------------------------------

pi3's Linux Kernel Runtime Guard


I'm happy to announce that my moonlight project is finally released. Thanks to
Alexander Peslyak (a.k.a. Solar Designer) it is available through Openwall.

Linux Kernel Runtime Guard (LKRG) is a loadable kernel module that performs
runtime integrity checking of the Linux kernel and detection of security
vulnerability exploits against the kernel. As controversial as this concept is,
LKRG attempts to post-detect and hopefully promptly respond to unauthorized
modifications to the running Linux kernel (integrity checking) or to
credentials (such as user IDs) of the running processes (exploit detection).
For process credentials, LKRG attempts to detect the exploit and take action
before the kernel would grant the process access (such as open a file) based on
the unauthorized credentials. More information about LKRG you can get at its
brand new homepage:

http://www.openwall.com/lkrg/

LKRG has been in (re-)development for a couple of years, and built upon one of
my prior's experience with a related project in 2011 (for CERN).

An official announcement was made by Openwall and it can be read here:
http://www.openwall.com/lists/announce/2018/01/29/1

A lot of useful technical information about LKRG can be found on Openwall wiki
page:
http://openwall.info/wiki/p_lkrg/Main

On the BitBucket website you can find the latest LKRG source-code which might
include patches not visible in the official version yet. Currently, LKRG has
two completely separate branches with the different thread models and goals.
Main branch is available here:

https://bitbucket.org/Adam_pi3/lkrg-main/

and experimental branch is available here:

https://bitbucket.org/Adam_pi3/lkrg-experimental/


If you would like to support LKRG, you are very welcome to do so ;-)
It can be done via Patreon website here:
https://www.patreon.com/p_lkrg

---------------------------------------------------------------------------------------------------------

                                  _,.-----.,_
                               ,-~           ~-.
                             ,^___    pi3    ___^.
                           ./~"   ~"   .   "~   "~\.
                           Y  ,--._    I    _.--.  Y
                           | Y     ~-. | ,-~     Y |
                           | |   ***  }:{  ***   | |
                           j l   *** / | \ ***   ! l
                        .-~  (__,.--" .^. "--.,__)  ~-.
                       (           / / | \ \           )
                        \.____,   ~  \/"\/  ~   .____,/
                         ^.____                 ____.^
                            | |T ~\  !   !  /~ T| |
                            | |l   _ _ _ _ _   !| |
                            | l \/V V V V V V\/ j |
                            \  \ \|_|_|_|_|_|/ /  /
                             \  \[T T T T T TI/  /
                              \  `^-^-^-^-^-^'  /
                               \               /
                                \.           ,/
                                  "^-.___,-^"