Subject: [PATCH] gnu: Add lkrg.
From: phodina <[email-masked]>
To: Guix Patches <[email-masked]>
Date: Wed, 20 Jul 2022 08:59:26 +0000
List-Id: <debbugs-submit.debbugs.gnu.org>

Hi,

this patch adds kernel module to improve runtime security of the system.

----
Petr

From 985199faeb4164df909d8c6b48ba941c62312266 Mon Sep 17 00:00:00 2001
From: Petr Hodina <[email-masked]>
Date: Wed, 20 Jul 2022 10:28:30 +0200
Subject: [PATCH] gnu: Add lkrg.

* gnu/packages/linux.scm (lkrg): New variable.

diff --git a/gnu/packages/linux.scm b/gnu/packages/linux.scm
index 48beae0e69..a46a74401c 100644
--- a/gnu/packages/linux.scm
+++ b/gnu/packages/linux.scm
@@ -60,7 +60,7 @@
 ;;; Copyright © 2021 Josselin Poiret <[email-masked]>
 ;;; Copyright © 2021 Olivier Dion <[email-masked]>
 ;;; Copyright © 2021 Solene Rapenne <[email-masked]>
-;;; Copyright © 2021 Petr Hodina <[email-masked]>
+;;; Copyright © 2021, 2022 Petr Hodina <[email-masked]>
 ;;; Copyright © 2022 Artyom V. Poptsov <[email-masked]>
 ;;; Copyright © 2022 Rene Saavedra <[email-masked]>
 
@@ -1342,6 +1342,37 @@ (define-public librem-ec-acpi-linux-module
 and the notification, WiFi, and Bluetooth LED.")
     (license license:gpl2)))
 
+(define-public lkrg
+  (package
+    (name "lkrg")
+    (version "0.9.3")
+    (source (origin
+              (method git-fetch)
+              (uri (git-reference
+                    (url "https://github.com/lkrg-org/lkrg")
+                    (commit (string-append "v" version))))
+              (file-name (git-file-name name version))
+              (sha256
+               (base32
+                "0yirb7n4mqv8cn0gziz1m7ymq00dhhy79j59jdgrx00b8rj57cfw"))))
+    (build-system linux-module-build-system)
+    (arguments
+     (list #:linux linux-libre
+           #:tests? #f
+           #:make-flags #~(list (string-append "CC="
+                                               #$(cc-for-target))
+                                (string-append "SYSSRC="
+                                               (assoc-ref %build-inputs
+                                                "linux-module-builder")
+                                               "/lib/modules/build"))))
+    (inputs (list bash-minimal))
+    (home-page "https://lkrg.org/")
+    (synopsis "Linux Kernel Runtime Guard")
+    (description
+     "This package performs runtime integrity checking of the Linux kernel and
+detection of security vulnerability exploits against the kernel.")
+    (license license:gpl2)))
+
 (define-public rtl8821ce-linux-module
   (let ((commit "be733dc86781c68571650b395dd0fa6b53c0a039")
         (revision "6"))
-- 
2.37.0