Aleksa Sarai
where else to find them
what they talk about
all 7 in the filters
where they keep going back
- linux.conf.au2 editions2020–2022
- Linux Plumbers Conference2 editions2022–2025
all 5 in the filters
on a stage with
never shared a talk
who talks about the same things
- James Bottomley25 talks
- Ignat Korchagin36 talks
- Duffie Cooley18 talks
- Alex Zenla7 talks
- Christian Brauner30 talks
- Jimmy Mesta7 talks
| title | conference | date |
|---|---|---|
| Clean-up on Aisle "fsconfig(2)" | Linux Plumbers Conference 2025 | 2025-12-11 |
Man pages for the “new” mount API finally land, and the talk calls out concrete gaps: FSCONFIG_SET_PATH and FSCONFIG_SET_PATH_EMPTY are effectively unused but… | ||
| Path Safety in the Trenches | Linux Plumbers Conference 2025 | 2025-12-11 |
Walks through concrete fixes for filesystem confused‑deputy bugs that produced CVE-2025-31133, CVE-2025-52565 and CVE-2025-52881, showing a migration of runc’s… | ||
| Secure Path Operations and Libpathrs | Open Source Summit Japan + AI_dev: Open Source GenAI & ML Summit + Automotive Linux Summit 2025 | 2025-12-08 |
Shows concrete fixes for multiple recent runc CVEs: replaces fragile path string resolution with libpathrs Rust library and a Go reimplementation, uses… | ||
| How can we make procfs safe? | Linux Plumbers Conference 2022 | 2022-09-12 |
Claim: use the new mount API to make procfs-safe resolution for container setup by combining open_tree clone to create a detached anonymous mount, verification… | ||
| Paperback: A Digital Will and Backup System for the Reasonably Paranoid | linux.conf.au 2022 | 2022-01-14 |
Paperback is a paper-first digital-will and backup system that actually implements Shamir Secret Sharing to split a ChaCha20-Poly1305 encrypted payload, signs… | ||
| Designing Syscalls for Extensibility | linux.conf.au 2020 | 2020-01-13 |
Examines a practical syscall extensibility pattern used by openat2, clone3 and new BPF calls: userland passes a struct plus its size and the kernel uses… | ||
| OCIv2: Container Images Considered Harmful | linux.conf.au 2020 | 2020-01-13 |
Argues that tar‑based OCI layers cause waste and duplication (touching a 10 GB file can double an image, deletions add 512‑byte whiteout headers), and proposes… | ||
| Securing Container Runtimes -- How Hard Can It Be? | linux.conf.au 2020 | 2020-01-13 |
Container runtimes repeatedly allow host breakouts via path races, procfs “magic links” and symlink-exchange attacks that succeed in under a second and… | ||
| Securing Container Runtimes -- How Hard Can It Be? | Container Camp AU 2019 | 2019-07-25 |
Catalogue of real CVEs and fixes with code-level detail: kernel-side openat2 / resolve_in_root patches to stop path-traversal and reopen races, a Rust library… | ||
| Container Images Considered Harmful | Container Camp UK 2018 | 2018-09-06 |
Argues that tar-based OCI/Docker images cause wasted transfer and storage by forcing file-level or whole-layer copies when metadata or a single byte changes… | ||
| nothing matches | ||