Skip to content

feat: add dynamic BPF blocklist - #4

Open
BN-sahu wants to merge 1 commit into
mainfrom
feature/dynamic-blocklist
Open

BN-sahu wants to merge 1 commit into
mainfrom
feature/dynamic-blocklist

Conversation

@BN-sahu

@BN-sahu BN-sahu commented Sep 10, 2026

Copy link
Copy Markdown
Collaborator

Changes

  • Added dynamic BPF Hash Map for file blocklist management
  • Added userspace commands to add, remove, and list blocked filenames
  • Replaced hardcoded filename enforcement
  • Preserved ring-buffer intrusion reporting
  • Updated Makefile for libz linking

Testing

  • Added sensitive.txt to blocklist
  • Verified file access is denied with EPERM
  • Removed sensitive.txt from blocklist
  • Verified file access works again

Limitation

The current implementation matches filenames/basenames rather than full paths.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant