Article 4Y2TE [$] KRSI and proprietary BPF programs

[$] KRSI and proprietary BPF programs

by
corbet
from LWN.net on (#4Y2TE)
The "kernel runtime security instrumentation" (or KRSI) patch set enablesthe attachment of BPF programs to every security hook in the kernel; LWN covered this work in December. That articlefocused on ABI issues, but it deferred another potential problem toour 2020 predictions: the possibility thatvendors could start shipping proprietary BPF programs for use withframeworks like KRSI. Other developers did pick up on the possibility that KRSI could be abused this way, though,leading to a discussion on whether KRSI should continue to allow the loading of BPF programs that do not carrya GPL-compatible license.
External Content
Source RSS or Atom Feed
Feed Location http://lwn.net/headlines/rss
Feed Title LWN.net
Feed Link https://lwn.net/
Reply 0 comments