Hi Joseph - I just wanted to check in and see how things are going. Is
there anything I can do to help? Happy to test out some kernel builds if
needed. Thanks!
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Thanks, Eric! I'm going to build some test kernels and will post them
shortly.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2054810
Title:
Adding bpf to CONFIG_LSM in linux kernel
To manage
Joseph - thanks for looking into this. Please let me know if I can be of
assistance. I'd be happy to test out the corresponding changes on my
end. Just let me know - thank you!!
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Changed in: linux (Ubuntu)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu)
Assignee: (unassigned) => Joseph Salisbury (jsalisbury)
** Also affects: linux (Ubuntu Mantic)
Importance: Undecided
Status: New
** Also affects: linux (Ubuntu Jammy)
Importance:
Can Ubuntu please consider addressing this as a part of the upcoming 24
LTS release? The ability to leverage LSM based BPF programs on Ubuntu
out-of-the-box (ie. without having to update grub and rebooting) opens
the door to a growing ecosystem of security tooling. There are major
computing
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: linux (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2054810
Title:
** Description changed:
Linux kernel since 5.7 allows to write eBPF programs which can be
attached to LSM hooks. More details here:
https://www.kernel.org/doc/html/v5.9/bpf/bpf_lsm.html
There are already projects trying to leverage that
systemd with the restrict-fs feature
