lkrg VS linux

What's the difference between LKRG and hardening-runtimepackage?

Similar concerns affect LKRG. Check out the LKRG bypass article by Alexander Popov for the details.

I'm not an expert, but I can think of two things related to the integrity of Linux kernel. Linux has the ability to mark itself tainted 1 if you, as example, load proprietary drivers. On the other hand, there's Linux Kernel Runtime Guard (LKRG) 2 that performs integrity check on Linux kernel and detects exploits.

I'll try to make this as succinct as possible. I use the Linux Kernel Runtime Guard with my kernel as a security measure, and I use xbps-src to compile the kernel myself.

Thanks! Was able to get it with "git clone --depth=1 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/" which gave me a folder which I do indeed appear to be able to patch as typical.

mkdir -o $HOME/build cd $HOME/build git clone https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git cd linux git checkout v6.2.6

I'm expanding my knowledge of git. I'm trying to track down a regression in the Linux kernel built for arm64 (specifically Raspberry Pi 4B.) The problem does not appear in the v5.18 and does appear in v5.19. I have cloned https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ and am working with that. Here is where I'm trying to start.

git repo for 5.15.y https://github.com/gregkh/linux branch: linux-5.15.y

Maintenance point releases are done by the Linux stable tree maintainers; see here: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/

Where did you get that URL? The clone URL is https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ (You're missing a "linux/" between scm and kernel.)

-> Generic Desktop (Performance) profile will be used. -> -> Installing dependencies [sudo] password for root:   Loading repository data... Reading installed packages... 'patch' is already installed. No update candidate for 'patch-2.7.6-3.5.x86_64'. The highest available version is already installed. 'gcc-c++' is already installed. No update candidate for 'gcc-c++-7-3.9.1.x86_64'. The highest available version is already installed. 'make' is already installed. No update candidate for 'make-4.2.1-7.3.2.x86_64'. The highest available version is already installed. 'ncurses-devel' is already installed. No update candidate for 'ncurses-devel-6.1-5.6.2.x86_64'. The highest available version is already installed. 'bison' is already installed. No update candidate for 'bison-3.0.4-3.3.1.x86_64'. The highest available version is already installed. 'flex' is already installed. No update candidate for 'flex-2.6.4-3.157.x86_64'. The highest available version is already installed. 'bc' is already installed. No update candidate for 'bc-1.07.1-11.37.x86_64'. The highest available version is already installed. 'libqt5-qtbase-common-devel' is already installed. No update candidate for 'libqt5-qtbase-common-devel-5.12.7-4.12.2.x86_64'. The highest available version is already installed. 'libelf-devel' is already installed. No update candidate for 'libelf-devel-0.168-4.5.3.x86_64'. The highest available version is already installed. 'libqt5-qtbase-devel' is already installed. No update candidate for 'libqt5-qtbase-devel-5.12.7-4.12.2.x86_64'. The highest available version is already installed. 'ccache' is already installed. No update candidate for 'ccache-3.4.2-1.9.x86_64'. The highest available version is already installed. 'git' is already installed. No update candidate for 'git-2.31.1-10.3.1.x86_64'. The highest available version is already installed. 'openssl-devel' not found in package names. Trying capabilities. 'libopenssl-devel' providing 'openssl-devel' is already installed. 'elfutils' is already installed. No update candidate for 'elfutils-0.168-4.5.3.x86_64'. The highest available version is already installed. 'rpm-build' is already installed. No update candidate for 'rpm-build-4.14.3-37.2.x86_64'. The highest available version is already installed. 'dwarves' is already installed. No update candidate for 'dwarves-1.19-bp153.1.13.x86_64'. The highest available version is already installed. 'lz4' is already installed. No update candidate for 'lz4-1.9.2-3.3.1.x86_64'. The highest available version is already installed. 'libXi-devel' is already installed. No update candidate for 'libXi-devel-1.7.9-3.2.1.x86_64'. The highest available version is already installed. 'pesign' is already installed. No update candidate for 'pesign-0.112-4.9.1.x86_64'. The highest available version is already installed. 'rpmdevtools' is already installed. No update candidate for 'rpmdevtools-8.10-bp153.1.12.noarch'. The highest available version is already installed. Resolving package dependencies... Nothing to do. kernel.org      https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (fetch) kernel.org      https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (push) googlesource.com        https://kernel.googlesource.com/pub/scm/linux/kernel/git/stable/linux-stable (fetch) googlesource.com        https://kernel.googlesource.com/pub/scm/linux/kernel/git/stable/linux-stable (push) -> Current branch: -> Reseting files to their original state fatal: ambiguous argument 'HEAD': unknown revision or path not in the working tree. Use '--' to separate paths from revisions, like this: 'git [...] -- [...]' -> exit cleanup done

I knew where to find the tarballs. I was asking where to find a git repo I could use to bisect in a more granular fashion. Anyway, someone else pointed me to https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/, which is what I needed (it has a branch that corresponds to the lts releases).