Namespacing the Linux Integrity Measurement Architecture

This presentation examines the architecture and implementation of namespacing Linux’s Integrity Measurement Architecture for containers. It covers namespace organization, challenges, performance, testing, upstreaming requirements, and userspace support.

Syllabus

Intro
IMA Namespacing - Motivation
IMA Namespacing - Background • 8 namespaces: Cgroup, IPC, Network, Mount, PID, Time, User, UTS
IMA Namespaces - Creating an IMA-ns
IMA Namespacing - Challenges
IMA Namespacing - Organization of iint's
IMA Namespacing - Mesh Problem
IMA Namespacing -- Performance
IMA Namespacing - Test Suite
IMA Namespacing - Upstreaming
IMA Namespacing - Userspace
IMA Namespacing - Summary