[sudhirc]

Thanks for the pointer. I will give it a read later on. If I understood correctly, eBPF is a guard rail for writing relatively bug free code. But it will still run in the processor[0] ring 0 which essentially is the same level as the kernel itself.

[0] https://en.wikipedia.org/wiki/Protection_ring