Debian SE Linux Status June 2012Debian SE Linux Status June 2012
It’s almost the Wheezy freeze time and I’ve been working frantically to get things working properly. Policy Status At the moment I’m preparing an upload of the policy which will[...]
Category: Security
Neighborhood WatchNeighborhood Watch
While writing my previous post I heard a huge noise at the front of my house. I found one man being restrained in a seated position on the ground at[...]
The Security Benefits of AutomationThe Security Benefits of Automation
Some Random WTFs The Daily WTF is an educational and amusing site that recounts anecdotes about failed computer projects. One of their stories titled “Remotely Incompetent” concerns someone who breaks[...]
SE Linux Status in Debian 2012-03SE Linux Status in Debian 2012-03
I have just finished updating the user-space SE Linux code in Debian/Unstable to the version released on 2012-02-16. There were some changes to the build system from upstream which combined[...]
SE Linux Status in Debian 2012-01SE Linux Status in Debian 2012-01
Since my last SE Linux in Debian status report [1] there have been some significant changes. Policy Last year I reported that the policy wasn’t very usable, on the 18th[...]
My Blog Server was CrackedMy Blog Server was Cracked
On the 1st of August I noticed that the server which runs my blog among other things was having an occasional SEGV from a sshd process. Unfortunately I was busy[...]
Secure Boot and Protecting Against RootSecure Boot and Protecting Against Root
There has been a lot of discussion recently about the recent Microsoft ideas regarding secure boot, in case you have missed it Michael Casadevall has written a good summary of[...]
SE Linux Status in Debian 2011-10SE Linux Status in Debian 2011-10
Debian/Unstable Development deb http://www.coker.com.au wheezy selinux The above APT sources.list line has my repository for SE Linux packages that have been uploaded to Unstable and which will eventually go to[...]
Capabilities vs SE LinuxCapabilities vs SE Linux
In December 2010 a paper was published by Robert N.M. Watson and Jonathan Anderson from the Cambridge University and Ben Laurie and Kris Kennaway of Google about the Capsicum capabilities[...]
SE Linux File Context PrecedenceSE Linux File Context Precedence
In my previous post I expressed a desire to use regular expressions for files that may appear in multiple places in the tree due to bind mounts for /run and[...]