4 ms·
Could something like this also be done via BPF?
by Phelinofist 5mo ago
Could something like this also be done via BPF?
- ARob109 5mo agoThat’s how this[0] project mitigates e.g. CopyFail. BPF LSM if you want to return -EPERM. Or a kprobe that kills the process via bpf_send_signal() if BPF LSM isn’t enabled. [0] https://github.com/cozystack/copy-fail-blocker#how-it-works https://github.com/cozystack/copy-fail-blocker#how-it-works