The Pros and Cons of EBPF

The kernel is involved when you're doing basically anything interesting. And so that's a really good opportunity to look at things from a security perspective. Having the ability to control this from the kernel, we've had things like App Armor and Essie Linux using interfaces in the kernel. But the difference with EBPF is we can customize that and have very dynamic policies.

Play episode from 22:26

Transcript

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app