jailer: Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies

digicat@infosec.pub · 6 months ago

jailer: Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies

moonpiedumplings@programming.dev · 6 months ago

Damn. This is cool af. I’ve seen so ,any interesting things with epbf, like bpfilter, facebook’s ebpf firewall which they discussed being more performant.

I wonder if an epbf alternative to selinux is possible?

digicat@infosec.pub · 6 months ago

deleted by creator

jailer: Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies

jailer: Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies

GitHub - gen0sec/jailer: Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.