The upcoming #EAC setup on #Linux for e.g. #Fortnite will require, quote:
- "the kernel binary in use during anti-cheat protected gameplay is signed with a well-known key"
- TPM 2.0
- "Secure Boot is enabled in the BIOS and only well-known keys are used to boot"
- Measured boot
- "IOMMU enabled and passthrough disabled" ("For non-handheld devices")
- Kernel Lockdown Integrity Mode
- Kexec Disabled
- Linux Security Module BPF
From my knowledge, my current distro, #CachyOS, currently would fail at least points 1 and 3 because they use a custom, performance-tuned kernel, and Secure Boot requires user-provided keys. Passthrough is irrelevant if running games with anti-cheat in bare metal, fortunately. Not sure about the points 4 through 8 being enabled in CachyOS's default kernel though.
Looks like it's #Epic of all actors, not #Valve, that will start pushing for #RemoteAttestation on Linux to remove the need for kernel-level #AntiCheat : onlineservices.epicgames.com/news/introducing-easy-anti-cheat-linux-v2
Hacker reshared this.
Björn
in reply to Carlos Solís • • •Carlos Solís
in reply to Björn • •I thought it was trolling, but checking the documentation for LSM BPF programs, I can see where this is coming from:
Depending on how is the MAC implemented then yeah, we're back to full device snooping. Siiiiiiiiiiiigh...
libewa
in reply to Carlos Solís • • •