Show HN: An eBPF kernel guard for vTPM access

Category: security

Tags: ebpf, tpm, security, linux, kernel

Score: 6.8/10 (Innovation: 7, Technical: 7, Documentation: 8, Utility: 5)

tpmlsm is an eBPF-based kernel guard that restricts access to the TPM device to an allowlist of binaries, enforced via BPF LSM. It's interesting because it uses eBPF and IMA file hashing to create a root-resistant security layer for TPM access, with clear documentation of its approach and limitations.

Target audience: devops, security engineers, linux kernel developers

Repository: https://github.com/bschaatsbergen/tpmlsm · Go · BSD-3-Clause · 2 stars

View on Hacker News