Skip to main content
grasp.study
About
Explore
Pricing
Log in
Try it for free
Back to course
👋
Welcome to a Grasp lesson
Create a free account
to keep studying and create your own study path.
Master embedded Linux kernel development
·
Module 9
Kernel Security & Isolation Mechanisms
1
Linux Security Modules: AppArmor vs. SELinux
Explain the purpose of the Linux Security Module (LSM) framework and compare AppArmor and SELinux.
Kernel Hardening: Features and Status Verification
Explain kernel hardening features (KASLR, stack canaries, SMEP/SMAP) and verify their status on a system.
Linux Namespaces: Isolating Processes
Explain how namespaces provide resource isolation and demonstrate creating isolated process environments.
4
Cgroups v2: Resource Management
Describe the cgroups v2 architecture and use it to apply resource limits (CPU, memory, I/O).
5
Seccomp-BPF: Restricting System Calls with libseccomp
Explain the seccomp-bpf mechanism for restricting system calls and write a basic filter using libseccomp.
6
Kernel Privilege Escalation: A CVE Deep Dive
Analyze a kernel privilege escalation CVE, explaining the vulnerability and how specific security mechanisms could mitigate it.
Previous module
Advanced Kernel Debugging & Tracing
Next module
Hardware-Assisted Virtualization & KVM