Google Engineer Posts Latest Patches For MAC + Audit Policy Using eBPF

One of the interesting innovations for the eBPF in-kernel virtual machine in recent times is the work by Google on supporting MAC and audit policy handling by it. This stems from currently custom real-time security data collection and analysis of Google servers internally for real-time threat protection and this patch-set is part of their work on allowing similar functionality in the upstream Linux kernel...