BPF Signing Using FSVerity and LSM Gatekeeper

Explore the intricacies of BPF signing through the implementation of fsverity and LSM gatekeeper in this 32-minute conference talk presented by Lorenz Bauer at a Linux Foundation event. Gain insights into the security mechanisms employed to enhance the integrity and trustworthiness of BPF programs, focusing on the integration of file system verity (fsverity) and Linux Security Module (LSM) gatekeeper. Delve into the technical aspects of how these components work together to provide a robust signing framework for BPF, ensuring the authenticity and integrity of BPF programs in Linux systems.