~/talks

Paul Moore

what they talk about

where they keep going back

on a stage with

all 7 in the filters

who talks about the same things

titleconferencedate
SELinux UpdateLinux Security Summit Europe 20252025-08-28
Kernel and userland SELinux updates focus on concrete features and numbers: new LSM syscalls to list/get/set LSM attributes, deprecating the niche selinuxfs…
Talk on
Handling New Syscalls in Seccomp FiltersLinux Security Summit North America 20252025-06-26
Proposal adds a max-kernel-version attribute to libseccomp so filters record the kernel they were written for and a second attribute that sets the action for…
Talk on
LSM Updates: IMA, SELinux, AppArmor, SMACK &...Linux Security Summit Europe 20232023-09-20
IMA and EVM become regular LSMs via LSM stacking and shared security blobs, add machine keyring support, and ship IMA/EVM utils 1.5 with UML test pipelines; an…
Talk on
LSM Maintainers PanelLinux Security Summit North America 20232023-05-10
Panel argues that LSM stacking is the single most important change and shows progress toward composition but no final namespacing solution; eBPF-as-LSM is…
Panel on
io_uring: So Fast. It's Scary.Linux Security Summit Europe 20222022-09-15
io_uring originally bypasses Linux audit and all LSM access checks by letting processes store and transfer credentials as “personalities” and add a command…
Talk on
Securing TPM Secrets with TXT and Kernel SignaturesLinux Security Summit Europe 20192019-10-31
Goal: restrict TPM2 NVRAM secrets so only kernels signed by an authorized key can unseal them, across UEFI and legacy BIOS hardware. Prototype implements a…
Talk on
Tutorial: The Why and How of libseccompLinux Security Summit North America 20192019-08-19
Explains how libseccomp turns BPF syscall filters into a portable C/Python API, shows live C code that builds a whitelist vs blacklist filter, loads it into…
Talk on
Securing TPM Secrets with TXT and Kernel SignaturesLinux Security Summit North America 20192019-08-19
Goal is to let only kernels signed by an authorized CA unwrap TPM2 NVRAM secrets by combining Intel TXT measured launch with signature-based PCRs instead of…
Talk on
Subsystem Update: State of SELinux, 2019Linux Security Summit North America 20192019-08-19
Kernel prints invalid file labels in audit records and cgroup v2 labeling via cgroupfs is implemented and working, plus SELinux now permits filesystem…
Talk on
Overview and Recent Developments: SELinuxLinux Security Summit Europe 20182018-10-25
SELinux presents a flexible mandatory access control model with a separate policy language and kernel enforcement, used by Fedora (targeted/strict/base) and…
Talk on
Sub-system Update: State of SELinuxLinux Security Summit North America 20182018-08-27
SELinux marks 18 years and ships in mainline for 15+, Enterprise Linux for 13 years and on ~96% of current Android devices; this year merges include access…
Talk on
SELinuxLinux Security Summit 20162016-08-25
SELinux now supports rkt and runC (joining Docker support, with Docker leveraging runC), adds overlayfs layer labeling that brings per-layer enforcement…
Talk on
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.