Makefile

obj-m := ksentinel.o
KDIR  ?= /lib/modules/$(shell uname -r)/build
PWD   := $(shell pwd)
KEY_FILE := $(PWD)/ksentinel_key.h

all: $(KEY_FILE)
	$(MAKE) -C $(KDIR) M=$(PWD) modules
	@echo ""
	@echo "╔═══════════════════════════════════════════════════════════════╗"
	@echo "║           ksentinel compiled successfully!                    ║"
	@echo "╚═══════════════════════════════════════════════════════════════╝"
	@echo ""

$(KEY_FILE):
	@echo ""
	@echo "╔═══════════════════════════════════════════════════════════════╗"
	@echo "║              GENERATING RANDOM UNLOCK KEY                     ║"
	@echo "╚═══════════════════════════════════════════════════════════════╝"
	@echo ""
	@KEY=$$(head -c 16 /dev/urandom | od -A n -t x1 | tr -d ' \n' | head -c 32); \
	echo "#ifndef KSENTINEL_KEY_H"          >  $(KEY_FILE); \
	echo "#define KSENTINEL_KEY_H"          >> $(KEY_FILE); \
	echo "#define UNLOCK_KEY \"$$KEY\""     >> $(KEY_FILE); \
	echo "#endif"                           >> $(KEY_FILE); \
	echo ""; \
	echo ""; \
	echo "  UNLOCK KEY: $$KEY"; \
	echo ""; \
	echo "════════════════════════════════════════════════════════════════"; \
	echo "  This key is embedded in the module and NOT saved anywhere."; \
	echo "  To unhide the module later: echo \"KEY\" > /proc/.ksctl"; \
	echo "  Or use: make unlock (and paste the key when prompted)"; \
	echo "════════════════════════════════════════════════════════════════"; \
	echo ""; \
	read -p "Press ENTER after you have written down the key..." dummy

unlock:
	@echo ""
	@echo "╔═══════════════════════════════════════════════════════════════╗"
	@echo "║              UNLOCK HIDDEN MODULE                             ║"
	@echo "╚═══════════════════════════════════════════════════════════════╝"
	@echo ""
	@if [ ! -f /proc/.ksctl ]; then \
		echo "[!] Error: /proc/.ksctl not found. Is the module loaded?"; \
		exit 1; \
	fi
	@bash -c 'read -sp "Enter unlock key: " KEY; echo; \
	if [ -z "$$KEY" ]; then \
		echo "[!] Error: key cannot be empty"; \
		exit 1; \
	fi; \
	echo "[*] Writing key to /proc/.ksctl..."; \
	if echo "$$KEY" | sudo tee /proc/.ksctl > /dev/null 2>&1; then \
		sleep 1; \
		if lsmod | grep -q ksentinel; then \
			echo "[+] SUCCESS! Module is now visible"; \
			lsmod | grep ksentinel; \
		else \
			echo "[!] Key written, but module still hidden. Check dmesg."; \
		fi \
	else \
		echo "[!] Failed to write to /proc/.ksctl"; \
	fi'

install: all
	@echo "[*] Loading ksentinel module..."
	sudo insmod ksentinel.ko
	@echo "[+] Module loaded! It is now hidden from lsmod."
	@echo ""
	@echo "To unhide it later:"
	@echo "  1. echo \"YOUR_KEY\" > /proc/.ksctl"
	@echo "  2. OR run: make unlock"

uninstall:
	@echo "[*] Attempting to remove ksentinel..."
	@if lsmod | grep -q ksentinel; then \
		echo "[*] Module is visible, removing..."; \
		sudo rmmod ksentinel; \
		echo "[+] Module removed"; \
	else \
		echo "[!] Module is hidden. Unlock it first with: make unlock"; \
		exit 1; \
	fi

clean:
	$(MAKE) -C $(KDIR) M=$(PWD) clean
	rm -f $(KEY_FILE)
	@echo "[*] Build artifacts cleaned"

status:
	@echo "╔═══════════════════════════════════════════════════════════════╗"
	@echo "║                  ksentinel STATUS                             ║"
	@echo "╚═══════════════════════════════════════════════════════════════╝"
	@echo ""
	@if lsmod | grep -q ksentinel; then \
		echo "[*] Module: LOADED and VISIBLE"; \
		lsmod | grep ksentinel; \
	else \
		if dmesg | tail -100 | grep -q "ksentinel"; then \
			echo "[*] Module: LOADED but HIDDEN"; \
		else \
			echo "[X] Module: NOT LOADED"; \
		fi \
	fi
	@echo ""
	@if [ -f /proc/.ksctl ]; then \
		echo "[*] Control interface: /proc/.ksctl exists"; \
	else \
		echo "[X] Control interface: not found"; \
	fi

help:
	@echo "╔═══════════════════════════════════════════════════════════════╗"
	@echo "║                  ksentinel Makefile                           ║"
	@echo "╚═══════════════════════════════════════════════════════════════╝"
	@echo ""
	@echo "Usage:"
	@echo "  make              - Compile (generates random key - WRITE IT DOWN!)"
	@echo "  make install      - Compile and load the module"
	@echo "  make unlock       - Unhide the module (prompts for key)"
	@echo "  make uninstall    - Remove the module (must be visible first)"
	@echo "  make status       - Check module status"
	@echo "  make clean        - Remove build artifacts"
	@echo ""
	@echo "Security:"
	@echo "  • Random 32-char key generated at compile time"
	@echo "  • Key is shown ONCE and embedded in the module"
	@echo "  • Key is NOT saved in any file"
	@echo "  • You must write it down manually"
	@echo ""
	@echo "Manual unlock:"
	@echo "  echo \"your_key_here\" > /proc/.ksctl"
	@echo ""

.PHONY: all unlock install uninstall clean status help