[nathants]

to secure linux, both ebpf and io_ring need to be disabled in kconfig at kernel compile time.

in security insensitive scenarios, they are both interesting tech.

[tptacek]

Radically different thread models. io_uring is conventionally exposed to unprivileged programs, and eBPF virtually never is.

[nathants]

isn’t the current linux security mindset that all access is potentially privileged?