Xen for TrainingXen for Training
I’m setting up a training environment based on Xen. The configuration will probably be of use to some people so I’m including it below the fold. Please let me know[...]
Category: Security
Squid and SE LinuxSquid and SE Linux
Is Squid not returning some data you need on a SE Linux system? The default configuration of the SE Linux policy for Squid only allows it to connect to a[...]
SecureCon 2007SecureCon 2007
I am running a tutorial and giving a talk about SE Linux at SecureCon 2007 [1]. The tutorial will go for 3 hours on Wednesday the 7th of November and[...]
New SE Linux Play Machine OnlineNew SE Linux Play Machine Online
After over a year I have finally got a SE Linux Play Machine online again. The details for logging in are at this link [1]. I’ve created T-shirt and mug[...]
Xen and SecurityXen and Security
I have previously posted about the difference between using a chroot and using SE Linux [1]. Theo de Raadt claims that virtualisation does not provide security benefits [2] based on[...]
0wned a DVD Player0wned a DVD Player
Above is a picture of a DVD player I saw on sale in Dick Smith Electronics [1] (a chain store that used to sell mostly electronics hobbyist gear but now[...]
Banking with an Infected ComputerBanking with an Infected Computer
Bruce Schneier summarised a series of articles about banking security [1]. He mentioned the fact that banks don’t seem to care about small losses and would rather just deal with[...]
My SE Linux Etch RepositoryMy SE Linux Etch Repository
deb http://www.coker.com.au etch selinux The above sources.list line has all the i386 packages needed for running SE Linux with strict policy on Etch as well as a couple of packages[...]
Insider Threats and Small Storage DevicesInsider Threats and Small Storage Devices
Danny Angus writes about the potential threat posed by small storage devices with large capacity [1]. His post was prompted by a BBC article about Hitachi’s plans for new hard[...]
AUUG 2007AUUG 2007
Today was the final day of the AUUG 2007 conference [1]. Yesterday I gave a talk about SE Linux for about an hour (not sure exactly as I forgot to[...]