A book-in-progress about the Linux kernel and its insides.
Repository Index
47,133 repositories indexed
1–5 of 5 · Most stars
Prototyping kernel development work outside mainline
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
Open-source eBPF compatibility evidence and CI gate