Show HN: Bomfather, eBPF Runtime Security

Category: security

Tags: ebpf, security, linux, sandboxing, runtime-security

Score: 7.3/10 (Innovation: 7, Technical: 8, Documentation: 7, Utility: 7)

Bomfather Agent is an eBPF-based runtime security tool that enforces fine-grained, executable-based policies for file, network, and GPU access using Linux Security Modules. It simplifies kernel-level sandboxing with short YAML policies and a default-deny approach, offering high performance and granular control. The project stands out for its simplicity and efficiency compared to existing solutions like strace.

Target audience: devops, security engineers, backend developers

Repository: https://github.com/bomfather/agent · C · Apache-2.0 · 43 stars

View on Hacker News