"Packet Filters" is a bit of a misnomer; as I understand it, it originally started out as a way to write complex firewall rules but the ability to safely run ar

"Packet Filters" is a bit of a misnomer; as I understand it, it originally started out as a way to write complex firewall rules but the ability to safely run arbitrary code in the kernel has proven so useful that other Linux subsystems are gradually adding eBPF support as well. For example, you can now write a BPF program to filter what system calls a process can execute.