Re: [RFC PATCH security-next 0/4] Introducing Hornet LSM

2025-04-05 Thread Blaise Boscaccy
Jarkko Sakkinen writes: Hi Jarkko, Thanks for the comments. Paul did a very nice job providing some background info, allow me to provide some additional data. > On Fri, Mar 21, 2025 at 09:45:02AM -0700, Blaise Boscaccy wrote: >> This patch series introduces the Hornet LSM. >> >> Hornet takes a

Re: [RFC PATCH security-next 0/4] Introducing Hornet LSM

2025-04-01 Thread Blaise Boscaccy
Jarkko Sakkinen writes: > On Mon, Mar 31, 2025 at 01:57:15PM -0700, Blaise Boscaccy wrote: >> There are two flavors of skeletons, normal skeletons, and light >> skeletons. Normal skeletons utilize relocation logic that lives in >> libbpf, and the relocations/instruction rewriting happen in usersp

Re: [RFC PATCH security-next 0/4] Introducing Hornet LSM

2025-04-01 Thread Jarkko Sakkinen
On Mon, Mar 31, 2025 at 01:57:15PM -0700, Blaise Boscaccy wrote: > There are two flavors of skeletons, normal skeletons, and light > skeletons. Normal skeletons utilize relocation logic that lives in > libbpf, and the relocations/instruction rewriting happen in userspace. > The second flavor, light

Re: [RFC PATCH security-next 0/4] Introducing Hornet LSM

2025-03-22 Thread Jarkko Sakkinen
On Sat, Mar 22, 2025 at 04:48:14PM -0400, Paul Moore wrote: > On Sat, Mar 22, 2025 at 4:44 PM Paul Moore wrote: > > > > On Sat, Mar 22, 2025 at 1:22 PM Jarkko Sakkinen wrote: > > > On Fri, Mar 21, 2025 at 09:45:02AM -0700, Blaise Boscaccy wrote: > > > > This patch series introduces the Hornet LSM

Re: [RFC PATCH security-next 0/4] Introducing Hornet LSM

2025-03-22 Thread Jarkko Sakkinen
On Sat, Mar 22, 2025 at 04:44:13PM -0400, Paul Moore wrote: > On Sat, Mar 22, 2025 at 1:22 PM Jarkko Sakkinen wrote: > > On Fri, Mar 21, 2025 at 09:45:02AM -0700, Blaise Boscaccy wrote: > > > This patch series introduces the Hornet LSM. > > > > > > Hornet takes a simple approach to light-skeleton-

Re: [RFC PATCH security-next 0/4] Introducing Hornet LSM

2025-03-22 Thread Paul Moore
On Sat, Mar 22, 2025 at 1:22 PM Jarkko Sakkinen wrote: > On Fri, Mar 21, 2025 at 09:45:02AM -0700, Blaise Boscaccy wrote: > > This patch series introduces the Hornet LSM. > > > > Hornet takes a simple approach to light-skeleton-based eBPF signature > > Can you define "light-skeleton-based" before

Re: [RFC PATCH security-next 0/4] Introducing Hornet LSM

2025-03-22 Thread Paul Moore
On Sat, Mar 22, 2025 at 4:44 PM Paul Moore wrote: > > On Sat, Mar 22, 2025 at 1:22 PM Jarkko Sakkinen wrote: > > On Fri, Mar 21, 2025 at 09:45:02AM -0700, Blaise Boscaccy wrote: > > > This patch series introduces the Hornet LSM. > > > > > > Hornet takes a simple approach to light-skeleton-based e

Re: [RFC PATCH security-next 0/4] Introducing Hornet LSM

2025-03-22 Thread Jarkko Sakkinen
On Fri, Mar 21, 2025 at 09:45:02AM -0700, Blaise Boscaccy wrote: > This patch series introduces the Hornet LSM. > > Hornet takes a simple approach to light-skeleton-based eBPF signature Can you define "light-skeleton-based" before using the term. This is the first time in my life when I hear abo

Re: [RFC PATCH security-next 0/4] Introducing Hornet LSM

2025-03-21 Thread Paul Moore
On Fri, Mar 21, 2025 at 12:45 PM Blaise Boscaccy wrote: > > This patch series introduces the Hornet LSM. > > Hornet takes a simple approach to light-skeleton-based eBPF signature > verification. Signature data can be easily generated for the binary > data that is generated via bpftool gen -L. This

[RFC PATCH security-next 0/4] Introducing Hornet LSM

2025-03-21 Thread Blaise Boscaccy
This patch series introduces the Hornet LSM. Hornet takes a simple approach to light-skeleton-based eBPF signature verification. Signature data can be easily generated for the binary data that is generated via bpftool gen -L. This signature can be appended to a skeleton executable via scripts/sign