警告：本项目正处于密集开发阶段，尚未准备好用于生产环境。API、策略格式和行为可能会在不通知的情况下发生变化。仅供测试和实验使用。
说明：这是一个独立实现，与 Meta 的解决方案并非同一项目。虽然 BpfJailer 在功能上相似，并受到 Meta 的 Liam Wisehart、Justin Ngai、Carl El Khoury、Mansee Chadha 的原始想法和设计的启发，但这是一个独立开发的独立代码库。我们对启发这项工作的愿景和基础概念表示衷心感谢。
Jailer 是一个基于 eBPF 的进程隔离系统，为 Linux 提供强制访问控制（MAC）。它使用 BPF task_storage 映射跟踪进程，并对文件访问、网络操作和进程执行实施基于角色的策略。
| 功能 | 状态 | 描述 |
|---|---|---|
| 进程跟踪 | ✅ 可用 | 使用 task_storage BPF 映射跟踪进程 |
| Socket 注册 | ✅ 可用 | 进程通过 Unix socket API 注册 |
| 基于角色的策略 | ✅ 可用 | 受限和宽松角色 |
| 文件访问控制 | ✅ 可用 | 阻止/允许文件打开操作 |
| 隔离继承 | ✅ 可用 | 子进程继承父进程的隔离 |
| 网络控制 | ✅ 可用 | 阻止/允许 socket 绑定/连接 |
| 端口/协议过滤 | ✅ 可用 | 按端口 TCP/UDP 允许/拒绝规则 |
| 执行控制 | ✅ 可用 | 阻止/允许进程执行 |
| 路径匹配 | ✅ 可用 | 带缓存失效的目录项遍历 |
| 签名二进制文件 | 🚧 存根 | 二进制签名验证（未实现） |
| 替代注册 | ✅ 可用 | 按可执行文件、cgroup 或 xattr 自动注册 |
| 无守护进程模式 | ✅ 可用 | 引导二进制文件在早期启动时固定程序 |
| 审计事件 | ✅ 可用 | 用于 systemd-journald 集成的 Perf 缓冲区 |
BPF_MAP_TYPE_TASK_STORAGE 支持）# Check current kernel config
zcat /proc/config.gz 2>/dev/null || cat /boot/config-$(uname -r)
必需选项：
CONFIG_BPF=y
CONFIG_BPF_SYSCALL=y
CONFIG_BPF_LSM=y
CONFIG_DEBUG_INFO_BTF=y
必须在内核启动参数中启用 BPF LSM：
# Check if BPF LSM is active
cat /sys/kernel/security/lsm
# Should include "bpf" in the list
# If not, add to kernel boot parameters:
# Edit /etc/default/grub and add to GRUB_CMDLINE_LINUX:
# lsm=lockdown,capability,landlock,yama,apparmor,bpf
# Then update grub and reboot:
sudo update-grub
sudo reboot
对于 Ubuntu/Debian 系统，你也可以使用：
# Create a script to enable BPF LSM
cat > /tmp/enable_bpf_lsm.sh << 'EOF'
#!/bin/bash
GRUB_FILE="/etc/default/grub"
if grep -q "lsm=" "$GRUB_FILE"; then
sudo sed -i 's/lsm=[^""]*/lsm=lockdown,capability,landlock,yama,apparmor,bpf/' "$GRUB_FILE"
else
sudo sed -i 's/GRUB_CMDLINE_LINUX="\(.*\)"/GRUB_CMDLINE_LINUX="\1 lsm=lockdown,capability,landlock,yama,apparmor,bpf"/' "$GRUB_FILE"
fi
sudo update-grub
echo "BPF LSM enabled. Please reboot."
EOF
chmod +x /tmp/enable_bpf_lsm.sh
sudo /tmp/enable_bpf_lsm.sh
预构建的 tarball 已针对 x86_64 和 aarch64 发布，基于 glibc 2.31 构建，因此它们可以在比构建环境更旧的发行版上运行。
curl -fsSL https://github.com/gen0sec/jailer/raw/main/install.sh | sudo sh
脚本在安装任何内容之前会验证 SHA256。每个构件也都经过 GPG 签名；要检查来源，请先导入发布密钥：
curl -fsSL https://github.com/gen0sec/jailer/releases/download/v0.1.1/bpfjailer-signing-key.asc | gpg --import
要手动安装，请从发布页面下载适用于您架构的压缩包，然后：
tar xzf bpfjailer-*-linux-gnu.tar.gz && cd bpfjailer-*-linux-gnu
sudo install -Dm0755 bpfjailer-bootstrap /usr/sbin/bpfjailer-bootstrap
sudo install -Dm0755 bpfjailer-daemon /usr/sbin/bpfjailer-daemon
sudo install -Dm0644 bpfjailer.bpf.o /usr/lib/bpfjailer/bpfjailer.bpf.o
sudo install -Dm0644 policy.json /etc/bpfjailer/policy.json
sudo install -Dm0644 bpfjailer-*.service /etc/systemd/system/
sudo systemctl daemon-reload
然后启用 安装模式 中描述的两种模式之一。
# Install Rust
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
# Install build dependencies (Ubuntu/Debian)
sudo apt-get install -y clang llvm libelf-dev linux-headers-$(uname -r)
# Install BPF target for Rust
rustup target add bpfel-unknown-none
cd jailer
# Build BPF programs
cd bpfjailer-bpf && cargo build --release && cd ..
# Build daemon and client
cargo build --release
# Run as root (loads config/policy.json if present)
sudo RUST_LOG=info ./target/release/bpfjailer-daemon
预期输出：
[INFO] BpfJailer daemon starting...
[INFO] Loading BpfJailer eBPF programs with libbpf-rs...
[INFO] ✓ pending_enrollments map available for enrollment
[INFO] ✓ network_rules map available for port/protocol filtering
[INFO] ✓ task_storage map created successfully
[INFO] ✓ Program task_alloc attached
[INFO] ✓ Program file_open attached
[INFO] ✓ Program socket_bind attached
[INFO] ✓ Program socket_connect attached
[INFO] ✓ Program bprm_check_security attached
[INFO] Initialized with default roles: restricted (1), permissive (2)
[INFO] Loaded policy from config/policy.json
[INFO] Loaded 5 roles
[INFO] Enrollment server listening on /run/bpfjailer/enrollment.sock
# Run vulnerability tests WITHOUT jailing (shows attacks succeed)
sudo python3 tests/vulnerable_apps/run_tests.py
# Run vulnerability tests WITH restricted role (shows attacks blocked)
sudo python3 tests/vulnerable_apps/run_tests.py --role 1
# Run specific test
sudo python3 tests/vulnerable_apps/run_tests.py --role 1 --test path
# List available tests and roles
sudo python3 tests/vulnerable_apps/run_tests.py --list
受限角色的示例输出：
============================================================
TEST: Path Traversal / Arbitrary File Read
============================================================
Attempting to read /etc/passwd via path traversal...
BLOCKED - Permission denied (BpfJailer blocked file access)
============================================================
TEST: Command Injection
============================================================
Attempting command injection...
BLOCKED - Permission denied (BpfJailer blocked exec)
============================================================
TEST: Reverse Shell / Data Exfiltration
============================================================
Test 1: Reverse shell connection to 127.0.0.1:4444
BLOCKED - Permission denied (BpfJailer blocked connect)
| 测试 | 漏洞 | 缓解措施 |
|---|---|---|
path_traversal | 通过 ../ 任意读取文件 | restricted, isolated |
command_injection | Shell 命令执行 | restricted, webserver, isolated |
reverse_shell | 向攻击者发起出站连接 | restricted, isolated |
ssrf | 访问内部服务/云元数据 | restricted, isolated |
arbitrary_write | 写入敏感路径 | restricted |
crypto_miner | 下载 + 执行 + 连接矿池 | restricted, webserver |
privilege_escalation | 读取 shadow，写入 sudoers | restricted |
#!/usr/bin/env python3
import socket
import json
import os
# Connect to daemon
sock = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM)
sock.connect("/run/bpfjailer/enrollment.sock")
# Enroll with restricted role (ID 1)
request = {"Enroll": {"pod_id": 1, "role_id": 1}}
sock.send((json.dumps(request) + "\n").encode())
response = sock.recv(4096).decode()
print(f"Enrollment: {response}")
sock.close()
# Try to read a file (should be blocked)
try:
open("/etc/passwd").read()
print("File access: ALLOWED")
except PermissionError:
print("File access: BLOCKED")
BpfJailer 从 JSON 策略文件加载角色。守护进程按以下顺序搜索策略文件：
$BPFJAILER_POLICY 环境变量/etc/bpfjailer/policy.jsonconfig/policy.json（相对于工作目录）