LWN.net's Journal
 
 [Most Recent Entries] [Calendar View]

Monday, May 31st, 2021

    Time Event
    1:06a
    Kernel prepatch 5.13-rc4
    The fourth 5.13 kernel prepatch is out for
    testing. "So after two small rc releases, the other show finally
    dropped, and rc4 is fairly sizable.    "
    3:23p
    Security updates for Monday
    Security updates have been issued by Debian (hyperkitty, libxml2, nginx, openjdk-11-jre-dcevm, rxvt-unicode, samba, and webkit2gtk), Fedora (exiv2, java-1.8.0-openjdk-aarch32, mingw-python-pillow, opendmarc, php-symfony3, php-symfony4, python-pillow, runc, rust-cranelift-codegen-shared, rust-cranelift-entity, and rxvt-unicode), openSUSE (curl, hivex, libu2f-host, libX11, libxls, singularity, and upx), Oracle (dotnet3.1 and dotnet5.0), Red Hat (docker, glib2, and runc), and Ubuntu (lz4).
    3:49p
    [$] eBPF seccomp() filters
    The seccomp()
    mechanism allows a process to load a BPF program to restrict its future use
    of system calls; it is a simple but flexible sandboxing mechanism that is
    widely used. Those filter programs, though, run on the "classic" BPF virtual
    machine, rather than the extended BPF
    (eBPF)     machine used elsewhere in the
    kernel. Moving seccomp() to eBPF has been an often-requested
    change, but security concerns have prevented that from happening. The
    latest attempt to enable eBPF is this patch
    set     from YiFei Zhu; whether it will succeed where others have failed
    remains to be seen.

    << Previous Day 2021/05/31
    [Calendar]     		Next Day >>

LWN.net   About LJ.Rossia.org