3 ms·

to secure linux, both ebpf and io_ring need to be disabled in kconfig at kernel compile time. in security insensitive scenarios, they are both interesting tech

to secure linux, both ebpf and io_ring need to be disabled in kconfig at kernel compile time. in security insensitive scenarios, they are both interesting tech.

tptacek 3y ago
Radically different thread models. io_uring is conventionally exposed to unprivileged programs, and eBPF virtually never is.
- nathants 3y ago
  isn’t the current linux security mindset that all access is potentially privileged?