Yuki Tanaka

Linux kernel security engineer with a background in eBPF and LSM. Likes hardening more than she likes sleeping.

Articles by Yuki Tanaka

Tutorials Jun 28, 2026Advanced

Keylime Remote Attestation on Linux: TPM 2.0 Trust for Server Fleets in 2026

Deploy Keylime continuous remote attestation on Linux with TPM 2.0: registrar, verifier, Rust agent, IMA runtime policies, and revocation webhooks in 2026.

Yuki Tanaka 13 min read

Tutorials Jun 08, 2026Advanced

BPF LSM (KRSI) in 2026: Writing Custom Kernel Security Policies with eBPF

Use BPF LSM (KRSI) to write dynamic kernel security policies in eBPF. Enable it on Linux 6.x, ship your first enforcement program, and stage audit-to-enforce rollouts safely.

Yuki Tanaka 10 min read

Tutorials May 27, 2026Advanced

Linux IMA and EVM: Kernel-Level File Integrity with TPM Attestation in 2026

Deploy Linux IMA and EVM for kernel-enforced file integrity. Learn appraisal policy, EVM key sealing to TPM 2.0, IMA digest lists, and Keylime remote attestation with working configs.

Yuki Tanaka 14 min read