some questions about disk encryptionsome questions about disk encryption
On a mailing list some questions were asked about disk encryption, I decided to blog the answer for the benefit of others: What type of encryption would be the strongest?[...]
Category: Security
Debian SE Linux policy bugDebian SE Linux policy bug
checkmodule -m -o local.mod local.te semodule_package -o local.pp -m local.mod semodule -u local.pp Save the following policy as local.te and then run the above commands to make semodule work correctly[...]
SE Linux on Debian in 5 minutesSE Linux on Debian in 5 minutes
Following from my 5 minute OSDC talk yesterday on 5 security improvements needed in Linux distributions I gave a 5 minute talk on installing SE Linux on Debian etch. To[...]
biometrics and passwordsbiometrics and passwords
In a comment on my post more about securing an office someone suggested using biometrics. The positive aspect of biometrics is that they can’t be lost, no-one is accidentally going[...]
more about securing an officemore about securing an office
My post about securing an office received many comments, so many that I had to write another blog entry to respond to them and also add some other things I[...]
a good security design for an officea good security design for an office
One issue that is rarely considered is how to deal with office break-ins for the purpose of espionage. I believe that this issue has been solved reasonably well for military[...]
The benefits of SE LinuxThe benefits of SE Linux
Today I discovered a bug in one of my programs, it called system() and didn’t correctly escape shell eta-characters. Fortunately I had written custom SE Linux policy for it which[...]
Ruxcon and SLUGRuxcon and SLUG
This weekend I was in Sydney for Ruxcon. Ruxcon is a computer security conference with a focus on penetration testing and related skills. The presentation on Unusual Bugs by Ilya[...]
SAK, ctrl-alt-del, and Linux keyboard mappingSAK, ctrl-alt-del, and Linux keyboard mapping
A common problem with Linux systems is when Windows users press CTRL-ALT-DEL at the login prompt and reboot the machine. To fix this some people change the ^ca line in[...]