BpfJailer: eBPF based Mandatory Access Control
summary
BpfJailer is an eBPF LSM that Meta uses to jail AI-generated code, block network/filesystem/IPC access, enforce signed binaries and command-line checks for CVMs, and stop even root from tampering. It deploys via socket activation and as pinned BPF programs in initrd, tracks roles with an attach-storage map (supporting ~10,000 pods), matches up to 3,300 patterns with a 255-depth path walker, reports no performance regression, and struggles mainly with bind mounts and mount‑namespace attacks.
AI-written summary · about
chapters (8)
- 0:00Introduction to BPF Jailer
- 1:04Why we built BPF Jailer
- 7:03Deployment and integration
- 11:17How BPF Jailer works
- 15:09File system matching challenges
- 23:49Performance and limitations
- 27:40Future of file handling in BPF
- 30:09Q&A and discussion
related talks
33mSeaBee: Defense for the Defense
36meBPF for Runtime Security
29meBPF on the Rise - Getting Started
36mPanel: Exploring eBPF Use Cases in Cloud-Native Security
27mBPF LSM - Updates and What next?
16mWhy Everyone Should Care About eBPF
40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools
33meBPF: exploring use case of BPF kernel infrastructure