Tag: kernel

KRSI (appeared in Kernel v5.7) stands for Kernel Runtime Security Instrumentation and the target of this patch is to allow users to implement lsm hooks by utilizing bpf compiled code. This gets interesting for a couple of reasons: LSM ENABLE KRSI BOOT PARAMETER Check current boot parameter cat /proc/cmdline Edit the boot parameters sudo vim…