Replicated Data eXchange format C lib

New implementation of Linux Security Module

Detect which processes deleted which files in real time in Linux. Used LSM's path_unlink hook.

Collecting every file open event with detailed context information in a Linux system, via LSM/BPF.

A unique security module for the Linux operating system

LevelDB implemented in C (unofficial -- not affiliated with Google in any way)

An eBPF module created to prevent docker escape attacks by leveraging the unshare command

Monitor and block specified processes and network connections with this docker-aware KRSI (BPF+LSM) security tool

LSM BPF module to block pwnkit (CVE-2021-4034) like exploits

bpflock - eBPF driven security for locking and auditing Linux machines

Based on https://git.nscs.kr/namjh/lsmbpf_demo

Various eBPF programs for tracing network connections

It's my easy RBAC demo in os security class.

S.A.R.A. development branch. Rebased often. Use at your own risk.

A place to store my toy linux-security modules.

Simple Role-based Linux kernel security module

Citadel — A Trusted Reference Monitor for the Linux Kernel using Intel SGX Enclaves

Openwrt 18.06.5 featured with the Exein's security framework

S.A.R.A.'s helper library

Kernel programming: This is a simple kernel module implementation for enforcing access control policies using Linux Security Module framework.