Casey Schaufler
where else to find them
website:http://schaufler-ca.com
github:cschaufler
what they talk about
all 6 in the filters
where they keep going back
- Linux Security Summit North America5 editions2018–2025
- Linux Security Summit Europe3 editions2018–2022
- linux.conf.au2 editions2020–2022
all 4 in the filters
on a stage with
- John Johansenonce
- Mickaël Salaünonce
- Mimi Zoharonce
all 4 in the filters
who talks about the same things
- Paul Moore13 talks
- John Johansen15 talks
- KP Singh10 talks
- Kees Cook23 talks
- Christian Brauner30 talks
- Roberto Sassu7 talks
| title | conference | date |
|---|---|---|
| The State and Direction of LSM Stacking | Linux Security Summit North America 2025 | 2025-06-26 |
LSM stacking is moving from ad hoc per-module state to infrastructure-managed data: security blobs hold per-object/process pointers, LSM properties replace… | ||
| Stacked LSMs and User Space | Linux Security Summit North America 2024 | 2024-04-18 |
Linux 6.8 adds three new system calls to access LSM attributes and a small C library, liblsm, implements friendly wrappers plus proc emulation for older… | ||
| System Calls for the Linux Security Module Infrastructure | Linux Security Summit North America 2023 | 2023-05-10 |
Linux introduces three new syscalls to replace messy /proc and securityfs interfaces: lsm_list_modules, lsm_self_get_attr and lsm_self_set_attr. They use a… | ||
| LSM Maintainers Panel | Linux Security Summit North America 2023 | 2023-05-10 |
Panel argues that LSM stacking is the single most important change and shows progress toward composition but no final namespacing solution; eBPF-as-LSM is… | ||
| Finally, a Smack Reference Policy | Linux Security Summit Europe 2022 | 2022-09-15 |
A Smack reference policy targets an Ubuntu desktop using systemd support and Smack’s bring up mode to log permitted-but-unexpected accesses, implements a three… | ||
| The Security Community Expressed As Too Many Venn Diagrams | linux.conf.au 2022 | 2022-01-14 |
Argument that the security community literally births computing technology, tracing cryptography -> mechanical and electronic code machines -> early computers… | ||
| [PATCH v22] Landing a Large Series | linux.conf.au 2020 | 2020-01-13 |
Seven years of work refactors Linux security modules from a single-user design into a multi-module stack, culminating in [PATCH v22] and many incremental patch… | ||
| When Jargon Becomes Gibberish | linux.conf.au 2020 | 2020-01-13 |
Explains why technical shorthand degenerates into misunderstanding: uncontrolled acronyms (ACLs and SCSI), reused metaphors (desktop, bootstrap), code names… | ||
| LSM Stacking - What You Can Do Now and What's Next | Linux Security Summit Europe 2019 | 2019-10-31 |
Kernel supports stacking for LSMs that restrict themselves to 5.3 infrastructure-managed blobs (credential, inode, file; now expanding to sock security blob)… | ||
| Subsystem Update: The 2019 Smack Update | Linux Security Summit North America 2019 | 2019-08-19 |
Smack gains a rule km cache that cuts rule-list lookup cost, a removed global label list that lowers memory use on small systems, and fixes to IPv6 ICMP… | ||
| Subsystem Update: LSM Stacking - What You Can Do Now and What's Next | Linux Security Summit North America 2019 | 2019-08-19 |
Linux 5.1 ships infrastructure-managed blobs so a limited set of extended security labels can be shared across LSMs, letting Tomayo and others run alongside… | ||
| Tutorial: How to Write a Linux Security Module | Linux Security Summit North America 2019 | 2019-08-19 |
Covers how to implement an LSM end to end: which kernel hooks to use (inode/file/socket vs packet), how to store labels in per-object infrastructure-managed… | ||
| Does Making the Kernel Harder Make Making the Kernel Harder? | Linux Security Summit Europe 2018 | 2018-10-25 |
Argument that kernel hardening measurably raises exploitation cost by changing real code: adoption of refcount_t prevents classic refcount bugs and touches… | ||
| Overview and Recent Developments: Smack | Linux Security Summit Europe 2018 | 2018-10-25 |
Smack is a focused mandatory‑access module that uses simple text labels are 24‑character text strings on subjects and objects and one deterministic rule to… | ||
| Security Module Stacks That Don't Fall Over | Linux Security Summit Europe 2018 | 2018-10-25 |
Work is adding kernel support for multiple concurrent LSMs by having the infrastructure manage the blobs and hand each module an offset so SELinux and Smack no… | ||
| Security Module Stacks that Don't Fall Over | Linux Security Summit North America 2018 | 2018-08-27 |
Kernel supports LSM stacking (since 4.18) by changing how per-object security blob memory is allocated centrally so multiple modules can keep state, and by… | ||
| Sub-system Update: Smack Update 2018 | Linux Security Summit North America 2018 | 2018-08-27 |
Smack is shipping in recent Samsung TVs, Tizen devices and automotive distributions including Toyota and integrates with Yocto builds; this year it gains… | ||
| Smack in 2016 | Linux Security Summit 2016 | 2016-08-25 |
Smack reports concrete adoption numbers: 36% Smart TV market, 16% smartwatch market, and is the fourth largest smartphone OS security LSM, positioning it as… | ||
| nothing matches | ||