Using LSM and eBPF to Supervise an Untrusted Userspace Agent
A new method for supervising untrusted userspace agents using BPF LSM. Details on security policies and implementation.
BPF LSM serves as the security boundary for a coding agent, running under the invoking user in a Docker-compatible environment. The policy is defined in the kernel using YAML, enforcing strict controls on file operations like opening, unlinking, and creating. This approach enhances security by restricting operations in the userspace.
This synthesis was produced from its source by AI; there is no human editor or manual review step. How we work