Get 20% off all career paths from fullstack to AI
Python, Prompt Engineering, Data Science — Build the Skills Employers Want Now
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore the evolution and future of Linux Security Module (LSM) stacking in this 30-minute conference talk by Casey Schaufler from Intel. Learn about the advancements made since the Linux kernel 5.1, which introduced infrastructure blob management, enabling limited sharing of extended system security data and greater flexibility in combining security modules. Discover the current capabilities for data sharing, upcoming plans for expanding shareable blobs, and the ultimate goal of complete module stacking. Gain insights into restricted stacking, infrastructure managed blobs, compound contexts, classic context choices, enhanced audit data, netlabel, secmarks, and labeled NFS4. Engage with the speaker's invitation for feedback on plans and suggestions for improvements in this Linux Foundation presentation.
Syllabus
Linux Security Modules
LSM Types
Restricted Stacking
Infrastructure Managed Blobs (5.3)
Goals
Infrastructure Managed Blobs (5.X)
Compound Contexts
Classic Contexts - Choices
Enhanced Audit Data
Infrastructure Managed Blobs (5.Y)
Netlabel
Secmarks
Labeled NFS4
Taught by
Linux Foundation