📰 AF_ALG "Nightmare" Being Further Limited In Linux 7.3 With New Sysctl Knob

The Linux kernel's AF_ALG interface was deprecated in Linux 7.2. This interface for letting user-space programs interact directly with the Linux kernel crypto API has proven to be a "massive attack surface" due to a variety of security concerns. With its deprecation in Linux 7.2, some AF_ALG features are already removed and for Linux 7.3 this interface is being further restrained...

🔗 Source: https://www.phoronix.com/news/AF-ALG-Restrict-Sysctl-Linux

#kernel #linux