kGraft: Live Patching of the Linux Kernel

The talk introduces the need of live kernel patching. Further, it explains what is kGraft, how it works, what are its limitations, and our plans with the implementation in the future. The presentation includes also a live demo if stars constellation...

Linux Security Modules: tracing deciding acting

Linux Security Modules – LSM – is a framework that allows to support a number of security models for Linux kernel. At Kernel Recipes 2012 and 2013, we discussed about generic principles of operating system security and formal security models in the Linux kernel. This...

Manage patches with Quilt

A presentation of the quilt patch management tool, including use cases (SUSE kernel, OBS) and practical usability tips. Quick presentation of what quilt is, what it can be used for, its most useful commands and what they do 3 typical use cases, step by step Package...

NDIV: a low overhead network traffic diverter

NDIV is a young, very simple, yet efficient network traffic diverter. Its purpose is to help build network applications that intercept packets at line rate with a very low processing overhead. A first example application is a stateless HTTP server reaching line rate...