Christian Brauner
Results
12
issues of
Christian Brauner
### Dynamic No New Privileges (NNP) via bpf On newer systems the use of privilege escalating binaries (suid, sgid, file capabilities) can be avoided. This model is illustrated in systemd's...
I'm exploring the possibility of making dm-verity usable directly from the filesystem, i.e., to decouple the concept from the block layer and move it into the filesystem layer to supplement...