Linux Security Summit Europe 2019
2019-10-31..2019-11-01
Lyon, France
[Linux Security Summit Europe 2018, Linux Security Summit Europe 2019, Linux Security Summit Europe 2022, Linux Security Summit Europe 2023, Linux Security Summit Europe 2024, Linux Security Summit Europe 2025]
as the organisers put it
The Linux Security Summit (LSS) is a technical forum for collaboration between Linux developers, researchers, and end users with the primary aim of fostering community efforts in analyzing and solving Linux security challenges. LSS is where key Linux security community members and maintainers gather to present and discuss their work and research to peers, joined by those who wish to keep up with the latest in Linux security development and who would like to provide input to the development process.
| title | author | length |
|---|---|---|
| Deep Analysis of Exploitable Linux Kernel Vulnerabilities 2017-2019 | Tong Lin, Luhai Chen | 44m |
Analysis of several 2017–2019 Linux kernel bugs that shows full exploit chains delivering arbitrary kernel R/W and end-to-end privilege escalation on x86 and… | ||
| Exploiting Race Conditions Using the Scheduler | Jann Horn | 34m |
Exploits two real bugs on a Google Pixel 2 (Linux 4.4): one races mremap against fallocate to produce a use-after-free of a physical page, then reallocates it… | ||
| Dealing with Uninitialized Memory in the Kernel | Alexander Potapenko | 23m |
KMSAN, a compiler-instrumentation detector integrated with fuzzing, finds lots of real kernel bugs: KMSAN (compiler-based detector) reports about found ~240… | ||
| A New Proposal for Protecting Kernel Data Memory | Igor Stoppa | 34m |
A New Proposal for Protecting Kernel Data Memory - Igor Stoppa, Huawei
Forum 1
Speakers: Igor Stoppa
This is a followup to the presentation "Protecting the… | ||
| Tracing: The Bane of You Security Folks | Steven Rostedt | 34m |
Tracing deliberately exposes kernel internals and therefore clashes with hardening: ftrace uses a ftrace trampoline to redirect calls, live kernel patching… | ||
| Kernel Runtime Security Instrumentation | KP Singh | 26m |
Kernel Runtime Security Instrumentation lets userspace attach eBPF to LSM hooks so policies can both detect and block actions without rebuilding the kernel… | ||
| CRIU and SELinux | Adrian Reber | 20m |
CRIU and SELinux - Adrian Reber, Red Hat
Forum 1
Speakers: Adrian Reber
To implement container live migration with Checkpoint/Restore in Userspace (CRIU) for… | ||
| Using a Different LSM from the Host in a Container | John Johansen | 32m |
Shows how to run AppArmor inside a container when the host uses SELinux or Smack by combining LSM stacking, a display LSM virtual view and AppArmor’s own… | ||
| Tutorial: Using Linux Primitives to Build Your Own Containers | Stephane Graber, Christian Brauner | 01h 31m |
Step-by-step build of a container from kernel primitives: create user namespaces and remap UIDs so root inside ≠ root outside, unshare mount and pivot_root to… | ||
| Address Spaces for Namespaces | Mike Rapoport | 22m |
Proposes giving each Linux namespace its own kernel page table (a namespace PGD per namespace) so kernel objects private to that namespace are mapped only… | ||
| BoF: Simple Remote Attestation with Secure & Attested Communication Channels | Roberto Sassu | 19m |
Proposes a small demonstrator: a network management system and router that only establish a secure session when the router’s TPM reports an allowed state. Uses… | ||
| The Linux Crypto API | Ard Biesheuvel | 51m |
Describes problems with over‑abstraction in the Linux Crypto API and the specific kernel patches and OpenSSL fixes implemented to address them. Covers how the… | ||
| OpenPOWER: Host OS (Linux Kernel) Secure Boot Key Management | Nayna Jain | 33m |
OpenPOWER implements a pluggable host-OS secure-boot key manager that stores signing material in a TPM + OPAL keystore with two persistent banks and an update… | ||
| Keylime - An Open Source TPM Project for Remote Trust. | Luke Hinds | 43m |
Keylime is an open source remote-attestation framework that measures TPM 2.0 roots of trust, uses IMA and measured boot to build attestation quotes, and… | ||
| Securing TPM Secrets with TXT and Kernel Signatures | Paul Moore | 27m |
Goal: restrict TPM2 NVRAM secrets so only kernels signed by an authorized key can unseal them, across UEFI and legacy BIOS hardware. Prototype implements a… | ||
| LSM Stacking - What You Can Do Now and What's Next | Casey Schaufler | 30m |
Kernel supports stacking for LSMs that restrict themselves to 5.3 infrastructure-managed blobs (credential, inode, file; now expanding to sock security blob)… | ||
| Upcoming x86 Technologies for Malicious Hypervisor Protection | David Kaplan | 40m |
SEV-SNP provides memory integrity and stronger VM isolation on x86 by adding a global Reverse Map Table (RMP) and new instructions like RMP update and… | ||
| Zephyr Project Security Status | David Brown | 40m |
Zephyr is a Linux Foundation RTOS with ~107 authors and hundreds of commits monthly, now meeting CII Gold practices and acting as a CVE numbering authority… | ||
| nothing matches | ||