Comment on eBPF Verification Is UntenableComments−nathants3yto secure linux, both ebpf and io_ring need to be disabled in kconfig at kernel compile time.in security insensitive scenarios, they are both interesting tech.−tptacek3yRadically different thread models. io_uring is conventionally exposed to unprivileged programs, and eBPF virtually never is.−nathants3yisn’t the current linux security mindset that all access is potentially privileged?
Comments
to secure linux, both ebpf and io_ring need to be disabled in kconfig at kernel compile time.
in security insensitive scenarios, they are both interesting tech.
Radically different thread models. io_uring is conventionally exposed to unprivileged programs, and eBPF virtually never is.
isn’t the current linux security mindset that all access is potentially privileged?