bpf_get_fsverity_digest: pinning binaries from a BPF LSM hook
bpf_get_fsverity_digest is not available on older kernels
We've read enough boring blog posts... We promise not to write any ;)
bpf_get_fsverity_digest is not available on older kernels
fs-verity survives a pulled drive. Here's why
We have built our tooling with eBPF, but eBPF can also be used to build rootkits and other malicious programs.
Sandboxing is a pain... How can we get around its issues?
What happens if we miss a vulnerability? How can we make sure it doesn't exfiltrate all of our data?