#Linux #OS_Securiry
🔆پروژه حفاظت کرنل لینوکس از خودش (Self-protection).
چیزی متفاوت از SELinux و seccomp.
"Self-protection" is about using the kernel to make it harder for attackers to exploit vulnerabilities, which is different from using the kernel to protect user space. It goes beyond access control (as in SELinux) or reducing the attack surface (as in seccomp) to eliminating entire classes of bugs so that even if a flaw is found, it would not be exploitable, even if the system is not running the latest version of the kernel. Since many modern attacks succeed by chaining multiple vulnerabilities together, defanging one of the exploits disrupts the kill chain.
https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project
@roozbeh_learning
🔆پروژه حفاظت کرنل لینوکس از خودش (Self-protection).
چیزی متفاوت از SELinux و seccomp.
"Self-protection" is about using the kernel to make it harder for attackers to exploit vulnerabilities, which is different from using the kernel to protect user space. It goes beyond access control (as in SELinux) or reducing the attack surface (as in seccomp) to eliminating entire classes of bugs so that even if a flaw is found, it would not be exploitable, even if the system is not running the latest version of the kernel. Since many modern attacks succeed by chaining multiple vulnerabilities together, defanging one of the exploits disrupts the kill chain.
https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project
@roozbeh_learning