[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 8 Jun 2020 17:18:06 +0200
From: Adam Zabrocki <pi3@....com.pl>
To: lkrg-users@...ts.openwall.com
Subject: Re: Outdated sysctl documentation
Hi,
We are on the edge of releasing a new LKRG version (0.8). However, we are still
working on some features which are changing some of the functinoality. Updating
documentation is the last step of the work which is in our TODO list.
Current documentation refelct the last LKRG release (0.7).
Few weeks ago we've completely rewrote communication channel and documentation
for it is in the official commit:
https://bitbucket.org/Adam_pi3/lkrg-main/commits/2febcf467d6182e9bd180334e2601c79812f2cf5
1 week ago (and a few days) we've also introduced profiles. Description of it
is also in the commit:
https://bitbucket.org/Adam_pi3/lkrg-main/commits/11da921d4196741b69f5156a9fd01be980141cb4
As soon as we are ready with the technical work, we will refelct that in the
documentation (which by the way will be also changed - structure will be
different).
Thanks,
Adam
On Fri, Jun 05, 2020 at 12:45:25PM +0200, Mikhail Morfikov wrote:
> According to what's written in the INSTALL file, there are the following
> sysctl options:
>
> pi3@...-VM:~/lkrg-main$ sudo sysctl -a | grep lkrg
> lkrg.block_modules = 0
> lkrg.ci_panic = 0
> lkrg.clean_message = 0
> lkrg.enforce_msr = 1
> lkrg.enforce_pcfi = 2
> lkrg.enforce_umh = 1
> lkrg.force_run = 0
> lkrg.hide = 0
> lkrg.log_level = 3
> lkrg.random_events = 1
> lkrg.smep_panic = 1
> lkrg.timestamp = 15
>
> But in my case, some of the above parameters are missing and a few other
> options are available:
>
> # sysctl -a | grep lkrg
> lkrg.block_modules = 0
> lkrg.heartbeat = 0
> lkrg.hide = 0
> lkrg.interval = 15
> lkrg.kint_enforce = 2
> lkrg.kint_validate = 3
> lkrg.log_level = 3
> lkrg.msr_validate = 1
> lkrg.pcfi_enforce = 1
> lkrg.pcfi_validate = 2
> lkrg.pint_enforce = 1
> lkrg.pint_validate = 2
> lkrg.profile_enforce = 9
> lkrg.profile_validate = 9
> lkrg.smap_enforce = 0
> lkrg.smap_validate = 0
> lkrg.smep_enforce = 2
> lkrg.smep_validate = 1
> lkrg.trigger = 0
> lkrg.umh_enforce = 1
> lkrg.umh_validate = 1
>
> It looks like the documentation is a little bit outdated and needs to be
> updated.
>
--
pi3 (pi3ki31ny) - pi3 (at) itsec pl
http://pi3.com.pl
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
