LKRG 0.9.9

Author: solardiz

CHANGES

@@ -1,11 +1,12 @@
-The following major changes have been made since 0.9.8:
+The following major changes have been made between LKRG 0.9.8 and 0.9.9:
 
  *) Support Linux 6.11+ and stable 6.10.10+
  *) Support new longterm kernels 5.10.220+
  *) Support new CentOS Stream 9 kernel 5.14.0-470.el9 and beyond (to RHEL 9.5)
  *) Support CONFIG_JUMP_LABEL batch mode also on ARM64
  *) Re-support build without CONFIG_TRACEPOINTS (was broken in 0.9.8)
  *) pCFI: Upgrade "Frame pointer is not on the stack" to ALERT with enforcement
+ *) Simplify seccomp validation (should help portability to more kernel builds)
 
 
 The following major changes have been made between LKRG 0.9.7 and 0.9.8:

README

@@ -9,7 +9,7 @@ on top of a wide range of mainline and distros' kernels, without needing to
 patch those.  We currently support kernel versions ranging from as far back as
 RHEL7's (and its many clones/revisions) and Ubuntu 16.04's to latest mainline
 and distros' kernels.  Our Continuous Integration setup has tested this version
-of LKRG with up to latest mainline kernel 6.8.0-060800rc6daily20240227-generic
+of LKRG with up to latest mainline kernel 6.11.0-061100daily20240916-generic
 as available for Ubuntu on the release date.
 
 LKRG currently supports the x86-64, 32-bit x86, AArch64 (ARM64), and 32-bit ARM
@@ -34,9 +34,9 @@ like the below:
 
 	wget https://www.openwall.com/signatures/openwall-offline-signatures.asc
 	gpg --import openwall-offline-signatures.asc
-	wget https://lkrg.org/download/lkrg-0.9.8.tar.gz.sign
-	wget https://lkrg.org/download/lkrg-0.9.8.tar.gz
-	gpg --verify lkrg-0.9.8.tar.gz.sign lkrg-0.9.8.tar.gz
+	wget https://lkrg.org/download/lkrg-0.9.9.tar.gz.sign
+	wget https://lkrg.org/download/lkrg-0.9.9.tar.gz
+	gpg --verify lkrg-0.9.9.tar.gz.sign lkrg-0.9.9.tar.gz
 
 Please preserve the GnuPG key above and also use it to verify future releases,
 which will most likely work in a similar manner.
@@ -180,12 +180,12 @@ What this means in effect is that on kernel upgrades the module is rebuilt.
 You can install LKRG using DKMS as well.  For instance, on Red Hat'ish
 distributions after following the shared download instructions above:
 
-	sudo tar -xzf lkrg-0.9.8.tar.gz -C /usr/src/
+	sudo tar -xzf lkrg-0.9.9.tar.gz -C /usr/src/
 	sudo dnf update -y
 	sudo dnf install kernel-devel dkms openssl
-	sudo dkms add -m lkrg -v 0.9.8
-	sudo dkms build -m lkrg -v 0.9.8
-	sudo dkms install -m lkrg -v 0.9.8
+	sudo dkms add -m lkrg -v 0.9.9
+	sudo dkms build -m lkrg -v 0.9.9
+	sudo dkms install -m lkrg -v 0.9.9
 
 The only difference on other distributions should be the installation of the
 kernel headers, the DKMS utility, and OpenSSL.  Install the headers for the
@@ -197,7 +197,7 @@ You can then query the status with:
 
 If everything is right, you should get similar output to the following:
 
-	lkrg/0.9.8, 5.18.9-200.fc36.x86_64, x86_64: installed
+	lkrg/0.9.9, 5.18.9-200.fc36.x86_64, x86_64: installed
 
 Please refer to the previous two sections for how to start the LKRG service or
 have it started on system bootup.  If you wish to use the unit/init file, you
@@ -216,7 +216,7 @@ while you're in the top level source code directory of the installed version.
 
 If you installed using DKMS, you'd uninstall with:
 
-	sudo dkms remove -m lkrg/0.9.8 --all
+	sudo dkms remove -m lkrg/0.9.9 --all
 
 You can also use the following command to temporarily stop the LKRG service
 without uninstalling it, for systemd:

debian/changelog

@@ -1,3 +1,9 @@
+lkrg (0.9.9-1) unstable; urgency=medium
+
+  * New upstream release.
+
+ -- Solar Designer <solar@openwall.com>  Wed, 23 Oct 2024 03:30:00 +0200
+
 lkrg (0.9.8-1) unstable; urgency=medium
 
   * New upstream release.

dkms.conf

@@ -1,5 +1,5 @@
 PACKAGE_NAME="lkrg"
-PACKAGE_VERSION="0.9.8"
+PACKAGE_VERSION="0.9.9"
 #BUILT_MODULE_LOCATION[0]="output"
 BUILT_MODULE_NAME[0]="lkrg"
 DEST_MODULE_LOCATION[0]="/updates/dkms"

lkrg.spec

@@ -4,8 +4,8 @@
 
 Summary: Linux Kernel Runtime Guard (LKRG)
 Name: lkrg
-Version: 0.9.8
-Release: 2%{?dist}
+Version: 0.9.9
+Release: 1%{?dist}
 License: GPLv2
 URL: https://lkrg.org
 Source: https://lkrg.org/download/%name-%version.tar.gz
@@ -85,6 +85,9 @@ fi
 %dir %attr(0750,lkrg-logger,lkrg-logger) /var/log/lkrg-logger
 
 %changelog
+* Wed Oct 23 2024 Solar Designer <solar@openwall.com> 0.9.9-1
+- Update to 0.9.9
+
 * Wed May 22 2024 Solar Designer <solar@openwall.com> 0.9.8-2
 - Pass direct kernel-devel's build path into make
 - Drop "BuildRequires: kernel" as we no longer need /lib/modules/*/build