microsoft / microsoft/ebpf-for-windows

eBPF for Windows should support signed ELF files

Open
#273 2 comments 0 reactions 0 assignees View on GitHub
enhancement help wanted security triaged
Dominant language
C
Stars
3.6k
Forks
311
Avg merge
6d 10h
Merged PRs (30d)
21

Description

Summary:
eBPF for Windows should support signature enforcement on ELF files containing eBPF programs. eBPF for Windows could then be configured to only permit loading of ELF files signed by key chaining up to a specific set of trusted roots.

Need to write up a detailed proposal for this prior first.

Existing proposals [Toward signed BPF programs](https://lwn.net/Articles/853489/)

Contributor guide

Open the contributing guide

Research direction

Start by reading the linked “Toward signed BPF programs” proposal and the issue’s requirement for signature enforcement on ELF files containing eBPF programs. Define how trusted roots and key chaining should be configured, and document the detailed proposal needed before implementation can begin.

Written by the indexing model from the issue text.

Assessment

Tech stack
c
Domain
operating-systems, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.