LWN.net[$] More efficient removal of pages from the direct map
The kernel's direct map provides code running in kernel mode with direct access to all physical memory installed in the system — on 64-bit systems, at least. It obviously makes li [...]
[$] Tracking when BPF programs may sleep
BPF programs can run in both sleepable and non-sleepable (atomic) contexts. Currently, sleepable BPF programs are not allowed to enter an atomic context. Puranjay Mohan has a new [...]
char (#4|2Caetra new release v1.2.0; added new shield that reacts when a webcam turns it on/off.
With this shield we are trying to avoid privacy leaks from you and others, among possible security visual breaches like harvesting information about your surroundings. Do not forget to cover your webcam with a nice cat sticker :3
https://github.com/carvilsi/caetra
#physicalSecurity #physicalAttacks #linuxhardening #hardwareSecurity #bpf #ebpF #bcc
caetra new release v1.1.0; added new shield to react when the CD-DVD-ROM tray opens or closes.
https://github.com/carvilsi/caetra?tab=readme-ov-file#12-cd_dvd_rom
#physicalSecurity #physicalAttacks #linuxhardening #hardwareSecurity #bpf #ebpF #bcc
[$] Reconsidering the multi-generational LRU
The multi-generational LRU (MGLRU) is an alternative memory-management algorithm that was merged for the 6.1 kernel in late 2022. It brought a promise of much-improved performance [...]
https://lwn.net/Articles/1060967/ #LWN #Linux #kernel #Android #Git #BPF #LSFMMBPF
Ammar Faizi@[email protected] @davidculley @sakarepmu
Let's not forget #nvme, #io_uring, #blockdev, and #bpf subsystems. Those are also maintained by #facebook employees.
Let's not forget #nvme, #io_uring, #blockdev, and #bpf subsystems. Those are also maintained by #facebook employees.
[$] The ongoing quest for atomic buffered writes
There are many applications that need to be able to write multi-block chunks of data to disk with the assurance that the operation will either complete successfully or fail altoget [...]
https://lwn.net/Articles/1060063/ #LWN #Linux #kernel #Git #PostgreSQL #PostgreSQL #XFS #BPF #io_uring
[$] No hardware memory isolation for BPF programs
On February 12, Yeoreum Yun posted a suggestion for an improvement to the security of the kernel's BPF implementation: use memory protection keys to prevent unauthorized access to [...]