Microsoft has revealed details about a new project it has been working on for Linux kernel. From a report: Named Integrity Policy Enforcement – or IPE – the project is a Linux security module (LSM). LSMs are optional add-ons for the Linux kernel that enable additional security features. According to a documentation page published on Monday, IPE is Microsoft’s attempt to solve the code integrity problem for Linux – an operating system the company broadly uses in its Azure cloud service. On Linux systems where IPE is enabled, system administrators can create a list of binaries that are allowed to execute and then add the verification attributes the kernel needs to check for each binary before allowing it to run. If binaries have been altered by an attacker, IPE can block the execution of the malicious code.
相关话题
| 话题 | 回复 | 浏览量 | 活动 | |
|---|---|---|---|---|
| 'Windows Subsystem for Linux 2' Will Include a Microsoft-Written Linux Kernel | 0 | 691 | 2020 年3 月 16 日 | |
| Microsoft Is Adding Linux, Android, and Firmware Protections To Windows | 0 | 866 | 2020 年6 月 24 日 | |
| Microsoft Submits Linux Kernel Patches to Make Linux Run as Root Partition on Hyper-V | 0 | 808 | 2020 年9 月 20 日 | |
| Microsoft to Move Security Vendors Out of Windows Kernel: Major Changes Ahead 🔒 | 0 | 83 | 2024 年9 月 13 日 | |
| Microsoft Releases Chromium-Based Edge Preview For Linux | 1 | 901 | 2020 年10 月 22 日 | |
| Eric S. Raymond: Is Microsoft Switching To a Linux Kernel That Emulates Windows? | 1 | 1016 | 2020 年9 月 29 日 | |
| Microsoft and Intel Project Converts Malware Into Images Before Analyzing It | 0 | 736 | 2020 年5 月 11 日 | |
| Firefox for Mac and Linux To Get a New Security Sandbox System | 0 | 737 | 2020 年2 月 26 日 |
!