To Learn More or Register: LinuxCon North America | CloudOpen North America
Back To Schedule
Friday, August 22 • 1:45pm - 2:35pm
kpatch: Have Your Security And Eat It Too! - Josh Poimboeuf, Red Hat

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

System administrators are often expected to balance two opposing goals: security and convenience. If they want to maximize security and install kernel patches as soon as they're available, they may end up having to reboot the system frequently. But rebooting the system can be disruptive to many applications and users. As a result, system administrators are often forced to postpone kernel security updates, sometimes for long periods of time, leaving many systems vulnerable.

This talk introduces kpatch, a dynamic kernel patching infrastructure for Linux, which aims to resolve the conflict between security and convenience. Security patches can go from source code to patched kernel in minutes, without having to reboot or disrupt any applications. This makes both system administrators and their users happier!

Survey this Session   

avatar for Josh Poimboeuf

Josh Poimboeuf

Principal Software Engineer - Linux kernel, Red Hat
Josh is a Linux kernel developer at Red Hat. He created kpatch, a live kernel patching framework. He maintains several Linux kernel subcomponents, including the x86 ORC unwinder, livepatch, and objtool. Recently he has worked on the Spectre/Meltdown CVE mitigations in upstream... Read More →

Friday August 22, 2014 1:45pm - 2:35pm CDT
Sheraton Ballroom V

Attendees (0)