Tying EVM into LSM Policy for Enhanced Linux Security

Tying EVM into LSM Policy for Enhanced Linux Security

Explore the integration of Extended Verification Module (EVM) with Linux Security Module (LSM) policy in this 34-minute conference talk by Matthew Garrett from Google. Delve into the challenges of securing developer machines and learn how EVM can enhance file integrity verification. Discover the potential of combining EVM with other Linux security mechanisms to grant privileges based on application metadata and signature validity. Examine the complexities of implementing this approach, including considerations for interpreted languages and performance optimization. Gain insights from Garrett's expertise in desktop Linux security as he presents solutions and discusses future possibilities for improving system integrity and security.