lkrg VS zen-kernel

What's the difference between LKRG and hardening-runtimepackage?

Similar concerns affect LKRG. Check out the LKRG bypass article by Alexander Popov for the details.

I'm not an expert, but I can think of two things related to the integrity of Linux kernel. Linux has the ability to mark itself tainted 1 if you, as example, load proprietary drivers. On the other hand, there's Linux Kernel Runtime Guard (LKRG) 2 that performs integrity check on Linux kernel and detects exploits.

I'll try to make this as succinct as possible. I use the Linux Kernel Runtime Guard with my kernel as a security measure, and I use xbps-src to compile the kernel myself.

Linux is configurable. If you don't want it to freeze up, configure it so it wont https://github.com/zen-kernel/zen-kernel

What do you mean fingers in the pie? And for liquorix the four people are only the ones involved in the packaging, you'll notice that they just include one huge monolithic patch here https://github.com/damentz/liquorix-package/tree/6.1/master/linux-liquorix/debian/patches/zen and to see what is inside that and whose fingers are in there you need to look into https://github.com/zen-kernel/zen-kernel and you have exactly the same situation as with xanmod with your 13k contributors.

It seems like the zen kernel "doesn't use" the same version as the upstream kernel (default). I think for now it is still on 6.0.12: https://github.com/zen-kernel/zen-kernel

Find the source here.

Officially supported kernels Community support on forum and bug reporting is available for officially supported kernels. Stable — Vanilla Linux kernel and modules, with a few patches applied. https://www.kernel.org/ || linux Hardened — A security-focused Linux kernel applying a set of hardening patches to mitigate kernel and userspace exploits. It also enables more upstream kernel hardening features than linux. https://github.com/anthraxx/linux-hardened || linux-hardened Longterm — Long-term support (LTS) Linux kernel and modules. https://www.kernel.org/ || linux-lts Zen Kernel — Result of a collaborative effort of kernel hackers to provide the best Linux kernel possible for everyday systems. Some more details can be found on https://liquorix.net (which provides kernel binaries based on Zen for Debian). https://github.com/zen-kernel/zen-kernel || linux-zen

linux5.18-zen $: cd patches patches $: wget https://github.com/zen-kernel/zen-kernel/releases/download/v5.18.11-zen1/v5.18.11-zen1.patch.xz patches $: xz -d v5.18.11-zen1.patch.xz

@OP So yeah on Linux we don't have NVE which i'm kinda glad about for various reasons. But we have gamemode (sorry for the ArchWiki entry on it) and custom kernels like Zen. If you opt to install the Zen Kernel ALWAYS keep a regular Kernel as backup, just in case.

I was afraid that disabling dm-crypt workqueues caused it: https://github.com/zen-kernel/zen-kernel/issues/282