eBPF: The Linux Kernel Feature That's Changing Security (and Attack Surfaces)

Tue, 10 Sep 2024 09:00:00 +0000

For most of Linux’s life there was a hard wall between code you wrote and the kernel that ran underneath it. If you wanted the kernel to do something new, you wrote a kernel module — which is to say, you wrote code with the power to crash, corrupt, or backdoor the entire machine, loaded it with your fingers crossed, and hoped. eBPF tore a window in that wall. And like any window, it lets the light in and gives someone a way to look out.

Ebpf - Tag - vo.rs

eBPF: The Linux Kernel Feature That's Changing Security (and Attack Surfaces)