On Nov 23, 2024, at 05:24, ToddAndMargo via users users@lists.fedoraproject.org wrote:
Hi All,
I just watched a youtube video on mseal, memory corruptions by hacker,s and the Linux kernel.
I do not believe much of what I see on youtube. Is mseal real and if so, will we be seeing it soon?
It’s funny, the way you talk about it I’d guess it was an exploit of some sort, but it looks like the “mseal()” syscall was introduced in the 6.10 kernel to MITIGATE exploits.
A quick search on the internet (not YouTube) gave me an idea of what it is. It’s a new syscall to mitigate (or prevent) attacks on a process’s memory. It was introduced by a Google engineer to improve Chromium security but it obviously is something that glibc has taken advantage of and will benefit many more things.
Official kernel documentation:
https://docs.kernel.org/userspace-api/mseal.html
The commit:
https://lwn.net/Articles/954936/
A blog post about it:
https://blog.trailofbits.com/2024/10/25/a-deep-dive-into-linuxs-new-mseal-sy...
I rarely search YouTube to learn about tech things like this. Sites like LWN and Phoronix often discuss these kinds of things, maybe start there next time. Don’t use generative AI at all to learn, either.