Unleashing Unprivileged eBPF Potential with Dynamic Sandboxing

Soo Yee Lim, Xueyuan Han, Thomas Pasquier

For safety reasons, unprivileged users today have only limited ways to customize the kernel through the extended Berkeley Packet Filter (eBPF). This is unfortunate, especially sinc…