microsoft / microsoft/ebpf-for-windows
eBPF for Windows should support signed ELF files
- Dominant language
- C
- Stars
- 3.6k
- Forks
- 311
- Avg merge
- 6d 10h
- Merged PRs (30d)
- 21
Description
Summary:
eBPF for Windows should support signature enforcement on ELF files containing eBPF programs. eBPF for Windows could then be configured to only permit loading of ELF files signed by key chaining up to a specific set of trusted roots.
Need to write up a detailed proposal for this prior first.
Existing proposals [Toward signed BPF programs](https://lwn.net/Articles/853489/)
Contributor guide
Research direction
Start by reading the linked “Toward signed BPF programs” proposal and the issue’s requirement for signature enforcement on ELF files containing eBPF programs. Define how trusted roots and key chaining should be configured, and document the detailed proposal needed before implementation can begin.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- c
- Domain
- operating-systems, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100