lkrg-org / lkrg

Linux Kernel Runtime Guard
https://lkrg.org
Other
402 stars 72 forks source link

Add a kprobe verification functionality #252

Closed Adam-pi3 closed 1 year ago

Adam-pi3 commented 1 year ago

Add a new logic to the integrity verification routine verifying if the kprobes are enabled and correctly run. This commit makes kprobe verification functionality as an independent module invoked by integrity verification routine as well as during initialization to make sure kprobes are enabled and run as intended (otherwise, initialization fails).

How Has This Been Tested?

I've done a few tests:

solardiz commented 1 year ago

@Adam-pi3 Please squash the "Minor fix" commit into the previous one (I'd use the fixup keyword in interactive rebase to do this), and force-push.

Edit: Also, going forward let's be doing the force-pushes right away, instead of letting temporary commits accumulate in PRs and then needing to be squashed as a separate step. GitHub allows for easy review of changes between force-pushes.

solardiz commented 1 year ago

Overall, I think this is almost ready for merging. Thank you, @Adam-pi3!

Adam-pi3 commented 1 year ago

Done