Splitting DRM - KMS Device Nodes
Explore the proposal to split DRM and KMS device nodes in GPUs, discussing benefits like fine-grained access control and shared nodes across multiple GPUs, and its implications for device functionality.
Virtually Thin - Tuning XFS on Top of Device Mapper dm-thin
Optimizing XFS performance on dm-thin: configuration tips, data block sizing, and addressing challenges like data loss, snapshots, fragmentation, and journaling for improved efficiency.
Kicking it up a Level - Bringing the Trusted Platform Module into QEMU
Explore virtualization of Trusted Platform Modules in qemu, enhancing security for cloud users through remote attestation and verification of untampered Trusted Computing Bases.
Proactive Defense Against CPU Side Channel Attacks
Explore proactive OS defenses against CPU side channel attacks, including Intel's strategies and community input on prioritizing Linux kernel protection measures.
Combining kTLS and BPF for Introspection and Policy Enforcement
Exploring the integration of kTLS and BPF for enhanced in-kernel introspection and policy enforcement of application data before encryption, addressing challenges and discussing optimization approaches.
WireGuard - Next-Generation Secure Kernel Network Tunnel
Explore WireGuard, a new Linux network tunneling mechanism with formal cryptographic protocol, small codebase, and widespread deployment. Learn about its kernel integration, performance, and ecosystem impact.
Untrusted File Systems
Exploring secure handling of untrusted filesystems in Linux, addressing challenges and potential solutions for USB sticks, VM images, and unprivileged containers.
What Does Remote Attestation Buy You?
Explore modern applications of TPM remote attestation in Linux, including secure remote deployment, easy recovery, and trust-based access control, without compromising security or user freedom.
Core Scheduling - Taming Hyper-Threads to Be Secure
Explore CPU vulnerabilities and core scheduling as a solution to keep hyperthreading secure. Learn about implementation, performance impacts, and future directions for this critical security feature.
Seamless Transparent Encryption with BPF and Cilium
Explore transparent encryption in dynamic environments using BPF and Cilium, covering implementation, standards, and proposed Linux kernel extensions for improved efficiency and policy enforcement.
BPF - MC
Explore advanced BPF (Berkeley Packet Filter) concepts and applications in Linux kernel programming and networking at this in-depth technical session.
Traffic Footprint Characterization of Workloads Using BPF
Explore eBPF-based network traffic analysis for containerized workloads, enabling improved scheduling and resource allocation in clusters to enhance performance of diverse applications.
System Boot and Security MC
Explore cutting-edge developments in Linux system boot processes and security measures at this comprehensive conference session, featuring expert discussions and insights.
Confidential Computing
Explore cutting-edge developments in confidential computing at the Linux Plumbers Conference, focusing on secure data processing and privacy-enhancing technologies.
System Boot and Security
Explore cutting-edge developments in Linux system boot processes and security measures at this comprehensive conference session, featuring expert discussions and insights.
Testing and Fuzzing MC
Explore advanced techniques for testing and fuzzing in Linux systems, focusing on enhancing security and reliability through innovative methodologies and tools.
PowerPC BOF
Explore PowerPC architecture, its current state, and future developments in this Linux-focused discussion led by industry experts.
Protection Key Supervisor
Explore Protection Key Supervisor (PKS) with Rick Edgecombe, delving into its implementation, security benefits, and potential applications in Linux systems.
Confidential Computing MC
Explore confidential computing concepts, technologies, and applications in this comprehensive session from Linux experts.
Protection Key Supervisor
Explore Protection Key Supervisor (PKS) with Rick Edgecombe, delving into its implementation, benefits, and potential applications for enhanced memory protection in Linux systems.
bpfilter - BPF Based Firewall
Explore bpfilter, a BPF-based firewall, covering its architecture, performance, and advantages over iptables. Learn about BPF program generation, code optimization, and deployment models.