Play Machine UpdatePlay Machine Update
My Play Machine [1] was offline for most of the past 48 hours (it’s up again now). I have upgraded the hardware for the Dom0 used to run it so[...]
Category: Security
Installing DKIM and Postfix in DebianInstalling DKIM and Postfix in Debian
I have just installed Domain Key Identified Mail (DKIM) [1] on my mail server. In summary the purpose is to allow public-key signing of all mail that goes out from[...]
Fixing execmod (textrel) Problems in LennyFixing execmod (textrel) Problems in Lenny
I’ve just updated my repository of SE Linux related packages for Lenny [1] to include a set of ffmpeg packages modified to not need text relocations (execmod access under SE[...]
Execmod and SE Linux – i386 Must DieExecmod and SE Linux – i386 Must Die
I have previously written about the execmod permission check in SE Linux [1] and in a post about SE Linux on the desktop I linked to some bug reports about[...]
SE Linux in Lenny status – Achieved Level 1SE Linux in Lenny status – Achieved Level 1
I previously described the goals for SE Linux development in Lenny and assigned numbers to the levels of support [1]. I have just uploaded a new policy to unstable which[...]
Random Opinions, Expert Opinions, and Facts about AppArmorRandom Opinions, Expert Opinions, and Facts about AppArmor
My previous post titled AppArmor is Dead [1] has inspired a number of reactions. Some of them have been unsubstantiated opinions, well everyone has an opinion so this doesn’t mean[...]
Google Chrome – the Security ImplicationsGoogle Chrome – the Security Implications
Google have announced a new web browser – Chrome [1]. It is not available for download yet, currently there is only a comic book explaining how it will work [2].[...]
Is SE Linux Unixish?Is SE Linux Unixish?
In a comment on my AppArmor is dead post [1] someone complained that SE Linux is not “Unixish“. The security model in Unix is almost exclusively Discretionary Access Control (DAC)[...]
Play Machine DowntimePlay Machine Downtime
From the 13th to the 14th of August my Play Machine [1] was offline. There was a power failure for a few seconds and the machine didn’t boot correctly. As[...]
AppArmor is DeadAppArmor is Dead
For some time there have been two mainstream Mandatory Access Control (MAC) [1] systems for Linux. SE Linux [2] and AppArmor [3]. In late 2007 Novell laid off almost all[...]