From 2642c01d5b1f5f962bb122393b4aab98d6ad8afe Mon Sep 17 00:00:00 2001 From: Solar Designer Date: Wed, 23 Oct 2024 04:05:51 +0200 Subject: [PATCH] LKRG 0.9.9 --- CHANGES | 3 ++- README | 20 ++++++++++---------- debian/changelog | 6 ++++++ dkms.conf | 2 +- lkrg.spec | 7 +++++-- 5 files changed, 24 insertions(+), 14 deletions(-) diff --git a/CHANGES b/CHANGES index 9d28d394..381adc3a 100644 --- a/CHANGES +++ b/CHANGES @@ -1,4 +1,4 @@ -The following major changes have been made since 0.9.8: +The following major changes have been made between LKRG 0.9.8 and 0.9.9: *) Support Linux 6.11+ and stable 6.10.10+ *) Support new longterm kernels 5.10.220+ @@ -6,6 +6,7 @@ The following major changes have been made since 0.9.8: *) Support CONFIG_JUMP_LABEL batch mode also on ARM64 *) Re-support build without CONFIG_TRACEPOINTS (was broken in 0.9.8) *) pCFI: Upgrade "Frame pointer is not on the stack" to ALERT with enforcement + *) Simplify seccomp validation (should help portability to more kernel builds) The following major changes have been made between LKRG 0.9.7 and 0.9.8: diff --git a/README b/README index b31b0abe..cbb028e8 100644 --- a/README +++ b/README @@ -9,7 +9,7 @@ on top of a wide range of mainline and distros' kernels, without needing to patch those. We currently support kernel versions ranging from as far back as RHEL7's (and its many clones/revisions) and Ubuntu 16.04's to latest mainline and distros' kernels. Our Continuous Integration setup has tested this version -of LKRG with up to latest mainline kernel 6.8.0-060800rc6daily20240227-generic +of LKRG with up to latest mainline kernel 6.11.0-061100daily20240916-generic as available for Ubuntu on the release date. LKRG currently supports the x86-64, 32-bit x86, AArch64 (ARM64), and 32-bit ARM @@ -34,9 +34,9 @@ like the below: wget https://www.openwall.com/signatures/openwall-offline-signatures.asc gpg --import openwall-offline-signatures.asc - wget https://lkrg.org/download/lkrg-0.9.8.tar.gz.sign - wget https://lkrg.org/download/lkrg-0.9.8.tar.gz - gpg --verify lkrg-0.9.8.tar.gz.sign lkrg-0.9.8.tar.gz + wget https://lkrg.org/download/lkrg-0.9.9.tar.gz.sign + wget https://lkrg.org/download/lkrg-0.9.9.tar.gz + gpg --verify lkrg-0.9.9.tar.gz.sign lkrg-0.9.9.tar.gz Please preserve the GnuPG key above and also use it to verify future releases, which will most likely work in a similar manner. @@ -180,12 +180,12 @@ What this means in effect is that on kernel upgrades the module is rebuilt. You can install LKRG using DKMS as well. For instance, on Red Hat'ish distributions after following the shared download instructions above: - sudo tar -xzf lkrg-0.9.8.tar.gz -C /usr/src/ + sudo tar -xzf lkrg-0.9.9.tar.gz -C /usr/src/ sudo dnf update -y sudo dnf install kernel-devel dkms openssl - sudo dkms add -m lkrg -v 0.9.8 - sudo dkms build -m lkrg -v 0.9.8 - sudo dkms install -m lkrg -v 0.9.8 + sudo dkms add -m lkrg -v 0.9.9 + sudo dkms build -m lkrg -v 0.9.9 + sudo dkms install -m lkrg -v 0.9.9 The only difference on other distributions should be the installation of the kernel headers, the DKMS utility, and OpenSSL. Install the headers for the @@ -197,7 +197,7 @@ You can then query the status with: If everything is right, you should get similar output to the following: - lkrg/0.9.8, 5.18.9-200.fc36.x86_64, x86_64: installed + lkrg/0.9.9, 5.18.9-200.fc36.x86_64, x86_64: installed Please refer to the previous two sections for how to start the LKRG service or have it started on system bootup. If you wish to use the unit/init file, you @@ -216,7 +216,7 @@ while you're in the top level source code directory of the installed version. If you installed using DKMS, you'd uninstall with: - sudo dkms remove -m lkrg/0.9.8 --all + sudo dkms remove -m lkrg/0.9.9 --all You can also use the following command to temporarily stop the LKRG service without uninstalling it, for systemd: diff --git a/debian/changelog b/debian/changelog index ed1fcb85..b1aa9f15 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +lkrg (0.9.9-1) unstable; urgency=medium + + * New upstream release. + + -- Solar Designer Wed, 23 Oct 2024 03:30:00 +0200 + lkrg (0.9.8-1) unstable; urgency=medium * New upstream release. diff --git a/dkms.conf b/dkms.conf index 6a149abc..27738f9e 100644 --- a/dkms.conf +++ b/dkms.conf @@ -1,5 +1,5 @@ PACKAGE_NAME="lkrg" -PACKAGE_VERSION="0.9.8" +PACKAGE_VERSION="0.9.9" #BUILT_MODULE_LOCATION[0]="output" BUILT_MODULE_NAME[0]="lkrg" DEST_MODULE_LOCATION[0]="/updates/dkms" diff --git a/lkrg.spec b/lkrg.spec index d07c4192..cf678c74 100644 --- a/lkrg.spec +++ b/lkrg.spec @@ -4,8 +4,8 @@ Summary: Linux Kernel Runtime Guard (LKRG) Name: lkrg -Version: 0.9.8 -Release: 2%{?dist} +Version: 0.9.9 +Release: 1%{?dist} License: GPLv2 URL: https://lkrg.org Source: https://lkrg.org/download/%name-%version.tar.gz @@ -85,6 +85,9 @@ fi %dir %attr(0750,lkrg-logger,lkrg-logger) /var/log/lkrg-logger %changelog +* Wed Oct 23 2024 Solar Designer 0.9.9-1 +- Update to 0.9.9 + * Wed May 22 2024 Solar Designer 0.9.8-2 - Pass direct kernel-devel's build path into make - Drop "BuildRequires: kernel" as we no longer need /lib/modules/*/build