LSM tree to the rescue

Sandbox for LKM & LSM

Kernel programming: This is a simple kernel module implementation for enforcing access control policies using Linux Security Module framework.

S.A.R.A.'s helper library

Openwrt 18.06.5 featured with the Exein's security framework

Citadel — A Trusted Reference Monitor for the Linux Kernel using Intel SGX Enclaves

Simple Role-based Linux kernel security module

A place to store my toy linux-security modules.

S.A.R.A. development branch. Rebased often. Use at your own risk.

It's my easy RBAC demo in os security class.

Various eBPF programs for tracing network connections

Based on https://git.nscs.kr/namjh/lsmbpf_demo

bpflock - eBPF driven security for locking and auditing Linux machines

LSM BPF module to block pwnkit (CVE-2021-4034) like exploits

New implementation of Linux Security Module

Monitor and block specified processes and network connections with this docker-aware KRSI (BPF+LSM) security tool

An eBPF module created to prevent docker escape attacks by leveraging the unshare command

LevelDB implemented in C (unofficial -- not affiliated with Google in any way)

A unique security module for the Linux operating system

kernel-shim loader for unsigned LSM bypass via initramfs tampering