RunSafe Alkemist

You're only a few steps away from deploying Alkemist:Source into your Red Hat environment!

1 of 4

Select Red Hat Distribution

Need to know your distribution? Run this command in a terminal: cat /etc/centos-release. The displayed release will match one of those to the left if Alkemist:Source supports it. CentOS instructions are similar to these and can be found on a dedicated Deploy page.

2 of 4

Install Alkemist:Source

# Add RunSafe repo to list of those yum will check for packages
sudo tee /etc/yum.repos.d/runsafesecurity.repo> /dev/null <<- EOM
[RunSafeSecurity]
name=RunSafeSecurity
baseurl=https://runsafesecurity.jfrog.io/artifactory/rpm-alkemist-lfr
enabled=1
gpgcheck=0
gpgkey=https://runsafesecurity.jfrog.io/artifactory/rpm-alkemist-lfr/repodata/repomd.xml.key
repo_gpgcheck=1
EOM
# Install alkemist-lfr
sudo yum -y install alkemist-lfr
source /etc/profile.d/alkemist-lfr.sh# Add RunSafe repo to list of those yum will check for packages
sudo tee /etc/yum.repos.d/runsafesecurity.repo> /dev/null <<- EOM
[RunSafeSecurity]
name=RunSafeSecurity
baseurl=https://runsafesecurity.jfrog.io/artifactory/rpm-alkemist-lfr
enabled=1
gpgcheck=0
gpgkey=https://runsafesecurity.jfrog.io/artifactory/rpm-alkemist-lfr/repodata/repomd.xml.key
repo_gpgcheck=1
EOM
# Install alkemist-lfr
sudo yum -y install alkemist-lfr
source /etc/profile.d/alkemist-lfr.sh

Run these commands on your system to create the file /etc/yum.repos.d/runsafesecurity.repo to let it know to look for Alkemist:Source's Load-time Function Randomization (LFR) packages on our servers and then install Alkemist:Source.

3 of 4

Build with Alkemist:Source

# ALKEMIST_LICENSE_KEY=<your license key> lfr-helper <your build command>

# For example, to build the hello_world.c shown in the next tab you would run:
sudo yum -y install gcc
ALKEMIST_LICENSE_KEY=<insert Alkemist license here> lfr-helper gcc -o hello_world hello_world.c# ALKEMIST_LICENSE_KEY=<your license key> lfr-helper <your build command>

# For example, to build the hello_world.c shown in the next tab you would run:
sudo yum -y install gcc
ALKEMIST_LICENSE_KEY=<insert Alkemist license here> lfr-helper gcc -o hello_world hello_world.c

Now that your system contains the files necessary for Alkemist:Source to run, prepend your build commands (make, gcc, g++, etc) with lfr-helper to automatically integrate Alkemist:Source into your existing build process.

The command shown will build the given hello_world.c into an Alkemist:Source-protected program called hello_world, but you can add lfr-helper to any build command, simple or complex.

4 of 4

Verify Alkemist:Source Protection

# Use ldd to see which libs have been included in the given binary
# ldd <binary name> | grep lfr

# For example, with the hello_world from the previous step
ldd ./hello_world | grep lfr

# This will return a line similar to the one below, but with a different memory address
# $ liblfr.so => /usr/local/lib/liblfr.so (0x7f659d514000)# Use ldd to see which libs have been included in the given binary
# ldd <binary name> | grep lfr

# For example, with the hello_world from the previous step
ldd ./hello_world | grep lfr

# This will return a line similar to the one below, but with a different memory address
# $ liblfr.so => /usr/local/lib/liblfr.so (0x7f659d514000)

Each tab shows a different way to confirm that Alkemist:Source has been applied to a given binary. The examples are for the hello_world binary built in the previous step.