There's no kernel module mentioned, and there's also nothing precluding you from being able to run two kernels. You'd boot up the EAC kernel when you want to play specific games, but you still have your "normal" kernel for everything else.
eBPF programs are not kernel modules and are highly restricted compared to them. They are strictly sandboxed and permission controlled vs true kernel modules which can basically do whatever they want. It's sort of analogous to a normal Linux program vs a Flatpak or Snap program. That normal Linux program can basically do whatever it wants within the confines of the user account it's running as, whereas Flatpak and Snap programs can only do what the sandbox has granted them permission to do.
Not even close to the same thing; they're heavily sandboxed/restricted. You're paranoid, if EAC wanted to just broad brush your Linux install they'd have released this as a kernel module which automatically has carte blanche over your entire system rather than the eBPF framework.
how am I paranoid, they exist? The sandbox doesn't prevent spying or anything you need kernel proviledges and you can't do kernel antocheat without spying? Lol????
kernel modules are incredibly hard for the average user to install, not even mentioning steamOS or immutable distros
Yes it does, eBPF is specifically set up to be heavily sandboxed/restricted.
Also, literally no kernel modules are not hard to install, it's called DKMS lol. You install them just like any other package, and the module builds with kernel updates.
That's the beauty of how Linux does things: they can do all the anti-cheaty things with eBPF and not run shitty code in ring 0. This is an infinitely better solution than what they have to do on Windows, which is write a "driver" that runs in the kernel and hooks everything.
eBPF runs in ring 0. It may be sandboxed to not mess with kernel internals and crash the system, but it’s already been shown to be able to act like a rootkit.
It's a BPF LSM, not a rootkit. Does it have read access to all of your system memory? Yes, it kinda needs that to ensure there's no cheating software loaded on the system. However, that's about it. The only other thing it can really do is prevent certain processes from reading a certain files, kinda like what SELinux and AppArmor do.
I mean good news?
If you don't play it, that changes nothing for you...and for those who do play it, that's an opportunity to fully jump away from Windows.
if you don't run one of the Epic approved distros with their approved (distro signed) kernels, then this is a nothing burger - it (EACv2 Linux) won't work on your system.
36
u/notkizil 17h ago
is this supposed to be good news or bad news