Comment Comment by ARob109 That’s how this[0] project mitigates e.g. CopyFail.BPF LSM if you want to return -EPERM.Or a kprobe that kills the process via bpf_send_signal() if BPF LSM isn’t enabled.[0] https://github.com/cozystack/copy-fail-blocker#how-it-works parent ARob109 5 months ago
BPF LSM if you want to return -EPERM.
Or a kprobe that kills the process via bpf_send_signal() if BPF LSM isn’t enabled.
[0] https://github.com/cozystack/copy-fail-blocker#how-it-works