Mitigate Baron SameEdit (CVE-2021-3156) vulnerability



Your installation of SUSE Linux Enterprise Server (SLES) must be registered before installing Polymorphing.

If you're using Polymorphing bundled with SUSE Linux Enterprise Server, you'll need to install SLES first. Installation instructions for v15.1 and v15.2 can be found here:

Installation instructions for SLES 15.1
Installation instructions for SLES 15.2

Polymorphing for Linux Overview

This section details how to install Polyverse’s polymorphic packages from an internet-connected machine. Polymorphing for Linux becomes the primary repository on the targeted system. This allows all supported packages to be retrieved from the Polyverse scrambled binary repository, and any custom, private, or unsupported packages to be retrievable from their original repositories. Every package downloaded is unique to the specific customer, and each used package is replaced every twenty-four hours.

Make sure your operating system is up-to-date

zypper update -y

Install Polymorphing for Linux

Note: Replace the demo registration key with your own, user-specific registration key.

curl -s | sh -s install <Your registration key here>

Reinstall all packages

zypper -n --gpg-auto-import-keys update && zypper -n install --auto-agree-with-licenses --no-recommends -f $(zypper -n search --installed-only --type package -v | grep "^i.*|" | sed "s/\s//g" | awk -F\| "{print \$2}")

Please reboot after re-installation, unless you're running in a container.

The configuration and installation is complete at this point.

Back to top

Uninstalling Polymorphing for Linux

Uninstalling Polyverse is a quick task. The high-level steps are as follows:

  1. Remove any references to the Polyverse scrambled binary repository from the system repository configuration files or folders
  2. Reinstall all packages so that they are downloaded from the remaining referenced repositories (which will not include Polyverse)

Remove the Polyverse Repository References

There is a script provided to automatically perform the removal of the Polyverse repository references. It can be executed using the following command:

curl -s | sh -s install --uninstall

Reinstall all packages

zypper -n --gpg-auto-import-keys update && zypper -n install --auto-agree-with-licenses --no-recommends -f $(zypper -n search --installed-only --type package -v | grep "^i.*|" | sed "s/\s//g" | awk -F\| "{print \$2}")

The configuration and uninstallation is complete at this point.

Back to top

The registered trademark Linux® is used pursuant to a sublicense from the Linux Foundation, the exclusive licensee of Linus Torvalds, owner of the mark on a world­wide basis.