Get the latest tech news
Microsoft Proposes "Hornet" Security Module For The Linux Kernel
Microsoft's newest open-source contribution to the Linux kernel being proposed is..
Microsoft has been a longtime proponent of eBPF for running custom programs within the Linux kernel safely and efficiently. Hornet allows users to continue to maintain an invariant that all code running inside of the kernel has been signed and works well with light-skeleton based loaders, or any statically generated program that doesn't require userspace instruction rewriting." In addition to the Hornet LSM itself that is gated by the "SECURITY_HORNET" Kconfig option, the patch series also proposes sign-ebpf as a new tool within the Linux kernel source tree for signing eBPF programs.
Or read this on Phoronix
