sudo dpkg -i --force-overwrite /var/cache/apt/archives/*.deb
sudo apt-get install -f
IME stuff
lspci | grep -i "MEI"
... no response is good
dmesg | grep -i "mei"
... no response is good, but there's usually something here in kali, so ...
(file test with ls /dev/mei* ... no response is good, no such file or directory)
sudo nano /etc/modprobe.d/ghost-build.conf
and type
# Kill the Management Engine Interface
blacklist mei
blacklist mei_me
# Kill the HDCP link (Privacy win: prevents hardware-level tracking via DRM)
blacklist mei_hdcp
then
sudo update-initramfs -u
reboot and
dmesg | grep -i "mei"
... should now return nothing.
RANDOMIZE RAM
sudo nano /etc/default/grub
Find the line starting with GRUB_CMDLINE_LINUX_DEFAULT. It probably looks like this right now: GRUB_CMDLINE_LINUX_DEFAULT="quiet splash"
Add the shuffle parameter inside the quotes. Update it to look like this: GRUB_CMDLINE_LINUX_DEFAULT="quiet splash page_alloc.shuffle=1"
Save and exit: Press Ctrl + O, then Enter to save. Press Ctrl + X to exit.
then...
sudo update-grub
then ...
sudo reboot
then ...
cat /sys/module/page_alloc/parameters/shuffle
You will probably get the response "Ywhich is what you want to see. But if you want the full printout docat /proc/cmdline`. Look for page_alloc.shuffle=1 in the output. If it's there, the kernel has the "deck of cards" and is shuffling it.
QEMU
sudo apt update && sudo apt install virt-manager -y
sudo apt update && sudo apt install qemu-kvm libvirt-daemon-system libvirt-clients bridge-utils
sudo apt install virtiofsd
open virtual machine manager (virt manager) but it says 'error: no active connection to install on'
so...
Start the virtualization daemon
sudo systemctl start libvirtd
Make it start automatically every time you boot
sudo systemctl enable libvirtd
then
Add yourself to the group
sudo usermod -aG libvirt $USER
Refresh your group membership without logging out
newgrp libvirt
Then connect to virt manager and add connection
do this because VMs probably wont start after reboot, because the default connection isn't connecting...
sudo virsh net-list --all
then
sudo virsh net-start default
now VMs should start
but you'll have to do it every time you boot, so do
sudo virsh net-autostart default
ERROR?
The error "unsupported configuration: security driver model 'apparmor' is not available" indicates that the virtual machine configuration specifies the apparmor security driver, but the host system cannot find or use it.
Edit the file /etc/libvirt/qemu.conf
find #security_driver = "selinux" and change it to security_driver = "none". If the line doesn't exist, add it to the file.
Save the file and then Terminal
sudo systemctl restart libvirtd.service
Restart VM.
...
