bpflock - eBPF driven security for locking and auditing Linux machines

LevelDB implemented in C (unofficial -- not affiliated with Google in any way)

A place to store my toy linux-security modules.

Openwrt 18.06.5 featured with the Exein's security framework

Various eBPF programs for tracing network connections

Kernel programming: This is a simple kernel module implementation for enforcing access control policies using Linux Security Module framework.

LSM BPF module to block pwnkit (CVE-2021-4034) like exploits

A unique security module for the Linux operating system

S.A.R.A. development branch. Rebased often. Use at your own risk.

LSM tree to the rescue

Citadel — A Trusted Reference Monitor for the Linux Kernel using Intel SGX Enclaves

S.A.R.A.'s helper library

Based on https://git.nscs.kr/namjh/lsmbpf_demo

It's my easy RBAC demo in os security class.

New implementation of Linux Security Module

An eBPF module created to prevent docker escape attacks by leveraging the unshare command

Monitor and block specified processes and network connections with this docker-aware KRSI (BPF+LSM) security tool

Sandbox for LKM & LSM

Simple Role-based Linux kernel security module