[$] BPF and security

The eBPF in-kernel virtual machine isapproaching its tenth anniversary as part of Linux; it has grown into atool with many types of uses in the ecosystem. Alexei Starovoitov, whowas the creator of eBPF and did much of the development of it, especiallyin the early going, gave the opening talk atLinuxSecurity Summit Europe2023 on the relationship between BPF andsecurity. In it, he related some interesting history, from a somewhatdifferent perspective than what is often described, he said. Among otherthings, it shows how BPFhas been both a security problem and a security solution along the way.