Re: [TECH TOPIC] Improving kernel security & integrity by generalizing ad-hoc safety mechanisms

[Gabriele Monaco <gmonaco@redhat.com>]

On Wed, 2026-09-09 at 19:07 +0300, igor.stoppa@gmail.com wrote:
> On Wed, 9 Sept 2026 at 18:22, Gabriele Monaco <gmonaco@redhat.com> wrote:
> 
> > In general I feel anything that tries to validate the kernel from the kernel
> > itself will have this kind of problems. It cannot really be isolated from
> > what it tries to verify.
> 
> Well, that is where I beg to differ. We have implemented such a mechanism.
> But I've been repeatedly told that I should provide first the code,
> which right now woulnd't really help much, because it is far from being in a
> reviewable shape.
> So I won't get back there.
> 
> You can look at the references from the root mail in this thread,
> or we can move the conversation to a different place, if you want to
> discuss more about it.

Right, I didn't think I had access to the entire conversation but it's all on
lore.

Now I remember, you discussed this at last year's LPC.
RV is indeed not quite a fit for this.

I'll be trying to follow your presentation this year. Also a BoF on this sounds
interesting to get the ball rolling.

Thanks,
Gabriele