this post was submitted on 05 Mar 2026
3 points (100.0% liked)

blueteamsec

650 readers
15 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
3
jailer: Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies (github.com)
submitted 9 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
2 comments fedilink hide all child comments
top 2 comments
sorted by: hot top controversial new old
[โ€“] moonpiedumplings@programming.dev 1 points 9 hours ago (1 children)

Damn. This is cool af. I've seen so ,any interesting things with epbf, like bpfilter, facebook's ebpf firewall which they discussed being more performant.

I wonder if an epbf alternative to selinux is possible?

[โ€“] digicat@infosec.pub 1 points 7 hours ago

this is the Meta work ..