[$] BPF signing LSM hook change rejected

BPF lets users load programs into a running kernel.
Even though BPF programs are checked by the verifier to
ensure that they stay inside certain limits, some users would still like to ensure
that only approved BPF programs are loaded. KP Singh’s

patches
adding that capability to the kernel were accepted
in version 6.18, but not everyone is
satisfied with his implementation. Blaise Boscaccy, who has been working to get
a version of BPF code signing with better auditability
into the kernel for some time, posted

a patch set
on top of Singh’s changes that alters the loading process to
not invoke security module hooks
until the entire loading process is complete.
The discussion on the patch
set is the continuation of a

long-running disagreement
over
the interface for signed BPF programs.

Python Software Foundation withdraws security-related grant proposal

The Python Software Foundation, earlier this year, successfully obtained a
$1.5 million grant from the US National Science Foundation “to
address structural vulnerabilities in Python and PyPI
“. The actual
grant came with some strings attached though, in the form of a requirement
not to pursue diversity, equity, and inclusion programs. So the Foundation
has withdrawn
the proposal
rather than agree to terms that run counter to its own
mission.

We’re disappointed to have been put in the position where we had to
make this decision, because we believe our proposed project would
offer invaluable advances to the Python and greater open source
community, protecting millions of PyPI users from attempted
supply-chain attacks. The proposed project would create new tools
for automated proactive review of all packages uploaded to PyPI,
rather than the current process of reactive-only review.

AMD EPYC 9965 “Turin” 2P Performance Seeing Some Gains On Linux 6.18

Beyond packing many exciting new features and changes, Linux 6.18 is expected to become this year’s Long Term Support (LTS) kernel version. Assuming the Linux 6.18 LTS designation, this next kernel version will see lots of use in enterprise environments and thus recently carried out some AMD EPYC 9965 2P “Turin” benchmarks between Linux 6.17 stable and the Linux 6.18 development kernel state…

AMD Radeon AI PRO R9700 Linux Performance For Single & Dual GPU Benchmarks

Today the AMD Radeon AI PRO R9700 is officially shipping as the company’s new RDNA4-based offering designed for AI workloads and priced at $1299+ USD. The AMD Radeon AI PRO R9700 offers 32GB of GDDR6 video memory and features 128 AI accelerators and rated for 96 TFLOPs peak half-precision compute, up to 1531 TOPS INT4 sparse, and has a 300 Watt TDP. Here are the initial benchmarks of the AMD Radeon AI PRO R9700 under Linux with ROCm 7.0 and testing both in single and dual R9700 graphics card configurations.

Splash DRM Client Proposed For Linux But Its Future Is Uncertain

Sent out on Sunday to the Linux kernel mailing list was a proposal for a new Direct rendering Manager (DRM) client for providing “splash screen” type functionality such as for embedded systems and more. But with Plymouth in user-space already being the dominant solution here and upstream developers tending to prefer such functionality in user-space instead, its future remains uncertain with some developers already questioning the value of this proposed solution…