lockc
lockc copied to clipboard
Making containers more secure with eBPF and Linux Security Modules (LSM)
We are getting sigstore integration in kubewarden, which is really good news, because we will be able to enforce image verification on Kubernetes clusters! But that brings a question -...
For now my suggestion would be to have two kinds of tests * unit tests (with some mocks, to not have to load actual BPF programs when running as user)...
First of all, decide if and how we want to define policies in regards to the following LSM hooks relate to task scheduling: ``` * @task_setnice: * Check permission before...
Revise the documentation link. Signed-off-by: Rong Fan [[email protected]](mailto:[email protected])
Correct url to kernel.org ebpf lsm