Back

BpfJailer: eBPF Mandatory Access Control [pdf]

63 points2 monthslpc.events
INTPenis2 months ago

I can imagine that using eBPF will be faster, but I never really imagined SElinux as slow myself. I guess it's because of all the files that need to be opened, and updating policy.

They probably mean for hyper scaling environments SElinux is slow to use, it is designed for traditional servers that don't change often.

It's interesting to see my old pal SElinux be replaced.

voxadam2 months ago

I've only found the slides for this talk, if anyone has video I'd love to see it.

man8alexd2 months ago
etyp2 months ago

Yeah I only found day 2, hopefully day 1 will appear though: https://www.youtube.com/watch?v=ZLRngpdV6Qg

(edited to not assume anything)

loeg2 months ago

The streams for some halls from day 1 seem to be here: https://www.youtube.com/@LinuxPlumbersConference/streams but I don't see Main Hall A from yesterday.

https://lpc.events/event/19/contributions/2159/