Seccomp denylist bypass via 32-bit argument truncation
Ricardo Branco says containerd, Podman, systemd and QEMU denylists can misread 32-bit arguments in 64-bit registers.
Stories per day · 30 days
2 RSS
5 stories, newest first · one card per story
Stories tagged #systemd
Fake Express Packages on npm Spread a Linux Worm
Nine fake Express and React npm packages install a Linux worm deploying a CHAOS RAT backdoor that spreads via SSH keys and npm tokens.
2
Understanding NvPCRs in systemd v262
A deep dive explains systemd v262 NvPCRs, extra TPM registers for measurement and attestation.
Software sandboxing: The basics (2025)
A technical write-up presents composable seccomp-BPF syscall allowlist policies for sandboxing unprivileged Linux applications, inspired by Docker, systemd, and OpenBSD pledge.
TPMSpy: Validation of Measured Boot Systems by Low-Level Tracing of TPM Usage
Researchers present TPMSpy, a platform-agnostic method validating TPM Measured Boot via low-level tracing, finding inconsistent Linux systemd measurements that break remote attestation and LUKS decryption.