Date: Mon, 8 Jun 2020 17:18:06 +0200 From: Adam Zabrocki <pi3@....com.pl> To: lkrg-users@...ts.openwall.com Subject: Re: Outdated sysctl documentation Hi, We are on the edge of releasing a new LKRG version (0.8). However, we are still working on some features which are changing some of the functinoality. Updating documentation is the last step of the work which is in our TODO list. Current documentation refelct the last LKRG release (0.7). Few weeks ago we've completely rewrote communication channel and documentation for it is in the official commit: https://bitbucket.org/Adam_pi3/lkrg-main/commits/2febcf467d6182e9bd180334e2601c79812f2cf5 1 week ago (and a few days) we've also introduced profiles. Description of it is also in the commit: https://bitbucket.org/Adam_pi3/lkrg-main/commits/11da921d4196741b69f5156a9fd01be980141cb4 As soon as we are ready with the technical work, we will refelct that in the documentation (which by the way will be also changed - structure will be different). Thanks, Adam On Fri, Jun 05, 2020 at 12:45:25PM +0200, Mikhail Morfikov wrote: > According to what's written in the INSTALL file, there are the following > sysctl options: > > pi3@...-VM:~/lkrg-main$ sudo sysctl -a | grep lkrg > lkrg.block_modules = 0 > lkrg.ci_panic = 0 > lkrg.clean_message = 0 > lkrg.enforce_msr = 1 > lkrg.enforce_pcfi = 2 > lkrg.enforce_umh = 1 > lkrg.force_run = 0 > lkrg.hide = 0 > lkrg.log_level = 3 > lkrg.random_events = 1 > lkrg.smep_panic = 1 > lkrg.timestamp = 15 > > But in my case, some of the above parameters are missing and a few other > options are available: > > # sysctl -a | grep lkrg > lkrg.block_modules = 0 > lkrg.heartbeat = 0 > lkrg.hide = 0 > lkrg.interval = 15 > lkrg.kint_enforce = 2 > lkrg.kint_validate = 3 > lkrg.log_level = 3 > lkrg.msr_validate = 1 > lkrg.pcfi_enforce = 1 > lkrg.pcfi_validate = 2 > lkrg.pint_enforce = 1 > lkrg.pint_validate = 2 > lkrg.profile_enforce = 9 > lkrg.profile_validate = 9 > lkrg.smap_enforce = 0 > lkrg.smap_validate = 0 > lkrg.smep_enforce = 2 > lkrg.smep_validate = 1 > lkrg.trigger = 0 > lkrg.umh_enforce = 1 > lkrg.umh_validate = 1 > > It looks like the documentation is a little bit outdated and needs to be > updated. > -- pi3 (pi3ki31ny) - pi3 (at) itsec pl http://pi3.com.pl
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.