Detect some linux kernel tampering. initial branch; not yet complete

-Download kernel headers, enter camb directory, and type 'make'
-New sysfs directory /sys/kernel/camb created with two files undearneath it:
syscall_addr_modified and text_segment_hash.

File `syscall_addr_modified` is either 1 or 0 representing whether the syscall function pointers were modified or not respectively.
File `text_segment_hash` is the current sha1 hash of the kernel's .text segment (excluding loaded modules)

The address range that camb currently hashes is subject to change because it's probably not comprehensive. However, it caught the rootkits that I've thrown at it, one of which is suterusu (https://github.com/mncoppola/suterusu).
Fix a couple bugs; cleanup unused code/includes
moving to top-level kernel directory
new headers
removing trailing content
Makefile more flexible; fix a few bugs; optionally naively hide module
Merge branch 'linux-camb' of github.com:facebook/osquery into linux-camb
Makefile more flexible; fix a few bugs; optionally naively hide module
Detect some linux kernel tampering. initial branch; not yet complete

-Download kernel headers, enter camb directory, and type 'make'
-New sysfs directory /sys/kernel/camb created with two files undearneath it:
syscall_addr_modified and text_segment_hash.

File `syscall_addr_modified` is either 1 or 0 representing whether the syscall function pointers were modified or not respectively.
File `text_segment_hash` is the current sha1 hash of the kernel's .text segment (excluding loaded modules)

The address range that camb currently hashes is subject to change because it's probably not comprehensive. However, it caught the rootkits that I've thrown at it, one of which is suterusu (https://github.com/mncoppola/suterusu).
Fix a couple bugs; cleanup unused code/includes
moving to top-level kernel directory
new headers
removing trailing content
Makefile more flexible; fix a few bugs; optionally naively hide module
Makefile more flexible; fix a few bugs; optionally naively hide module
Remove hooking of init module: it should really go in an LSM proper; also fix Makefile when SMAP is not specified
Merge branch 'linux-camb' of github.com:facebook/osquery into linux-camb

Conflicts:
	osquery/kernel/linux/Makefile
	osquery/kernel/linux/main.c
kernel_integrity vtable to use camb
Detect some linux kernel tampering. initial branch; not yet complete

-Download kernel headers, enter camb directory, and type 'make'
-New sysfs directory /sys/kernel/camb created with two files undearneath it:
syscall_addr_modified and text_segment_hash.

File `syscall_addr_modified` is either 1 or 0 representing whether the syscall function pointers were modified or not respectively.
File `text_segment_hash` is the current sha1 hash of the kernel's .text segment (excluding loaded modules)

The address range that camb currently hashes is subject to change because it's probably not comprehensive. However, it caught the rootkits that I've thrown at it, one of which is suterusu (https://github.com/mncoppola/suterusu).
Fix a couple bugs; cleanup unused code/includes