lkrg vs sysctl

Our great sponsors

InfluxDB - Power Real-Time Data Analytics at Scale

WorkOS - The modern identity platform for B2B SaaS

SaaSHub - Software Alternatives and Reviews

Our great sponsors

lkrg		sysctl
	Project
7	Mentions	1
397	Stars	190
6.5%	Growth	-
7.9	Activity	3.2
10 days ago	Latest Commit	10 months ago
C	Language
GNU General Public License v3.0 or later	License	GNU General Public License v3.0 only

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

lkrg

Posts with mentions or reviews of lkrg. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-02-16.

[Security] Questions about LKRG and Debian hardening-runtime
1 project | /r/debian | 23 Apr 2023

What's the difference between LKRG and hardening-runtimepackage?
LKRG – Linux Kernel Runtime Guard
1 project | news.ycombinator.com | 4 Jan 2023
Tetragone: A Lesson in Security Fundamentals
1 project | /r/linkersec | 24 May 2022

Similar concerns affect LKRG. Check out the LKRG bypass article by Alexander Popov for the details.
windows kernel patch guard-like for linux ?
3 projects | /r/linuxquestions | 16 Feb 2022

I'm not an expert, but I can think of two things related to the integrity of Linux kernel. Linux has the ability to mark itself tainted 1 if you, as example, load proprietary drivers. On the other hand, there's Linux Kernel Runtime Guard (LKRG) 2 that performs integrity check on Linux kernel and detects exploits.
Need help with template modification
1 project | /r/voidlinux | 20 Aug 2021

I'll try to make this as succinct as possible. I use the Linux Kernel Runtime Guard with my kernel as a security measure, and I use xbps-src to compile the kernel myself.
Linux Kernel Runtime Guard (LKRG)
1 project | /r/opensource | 19 Jan 2021
Linux Kernel Runtime Guard
1 project | news.ycombinator.com | 18 Jan 2021

sysctl

Posts with mentions or reviews of sysctl. We have used some of these posts to build our list of alternatives and similar projects.

K4YT3X's Hardened sysctl Configuration
1 project | /r/CKsTechNews | 22 Oct 2021

What are some alternatives?

When comparing lkrg and sysctl you can also consider the following projects:

ebpfkit - ebpfkit is a rootkit powered by eBPF

linux-network-performance-parameters - Learn where some of the network sysctl variables fit into the Linux/Kernel network flow. Translations: 🇷🇺

bouheki - bouheki is KRSI(eBPF+LSM) based Linux security auditing tool.

ansible-collection-hardening - This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

linux-hardened - Minimal supplement to upstream Kernel Self Protection Project changes. Features already provided by SELinux + Yama and archs other than multiarch arm64 / x86_64 aren't in scope. Only tags have stable history. Shared IRC channel with KSPP: irc.libera.chat #linux-hardening

lynis - Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

zen-kernel - Zen Patched Kernel Sources

the-book-of-secret-knowledge - A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

fapolicyd - File Access Policy Daemon

How-To-Secure-A-Linux-Server-With-Ansible - Ansible playbooks of "How To Secure A Linux Server".

wiser - :racehorse: Extremely minimal vmm for linux written in C. Hopefully someday will spin linux-vm for you.

suhosin7 - Suhosin Extension for PHP 7.x