io_uring: So Fast. It's Scary.
summary
io_uring originally bypasses Linux audit and all LSM access checks by letting processes store and transfer credentials as “personalities” and add a command passthrough that submits arbitrary requests without LSM context, creating a real privilege-bypass. The response adds u-ring audit records, new LSM hooks for credential delegation and kernel pull threads, and a coarse command passthrough gate. A small automation using seagrep script scans git trees for credential overrides and missing hooks and successfully flags regressions for faster review.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 0:31Overview of IOUring
- 5:18Security issues
- 10:48Fixing the issues
- 16:20Lessons in cooperation
- 20:06Challenges in cooperation
- 24:10Automated code inspection
- 36:45Future work and tools
- 39:07Q&A and conclusion
related talks
27mBad io_uring: A New Era of Rooting for Android
34mio_uring in the Automotive World
24mCurrent State of Exploit Mitigations in the Linux Kernel
30mEvasive Maneuvers: Strategies to Overcome Runtime Detection Tools
01h 02mPrompt-Jacking: The Rise of a New Supply Chain Risk
33mKernel Runtime Security Instrumentation
30mFinding Imposter Among Us: Container Edition
26mContainers: Your Ally in Improving Security