Notes on BPF and eBPF
>eBPF programs can’t access arbitrary kernel memory. Instead the kernel provides functions to get at some restricted subset of things.I must finally becoming a security pessimist when I read those sentences and the first thing I think is: these statements will not age well.