Lintian and Executable StacksLintian and Executable Stacks
Debian has a program called Lintian that is used to search for common bugs in Debian packages. When it encounters a package with a shared object that requests an executable[...]
How SE Linux Prevents Local Root ExploitsHow SE Linux Prevents Local Root Exploits
In a comment on my previous post about SE Linux and worms/trojans [1] a user enquired about which methods of gaining local root are prevented by SE Linux. A local[...]
A Long Laptop LifetimeA Long Laptop Lifetime
Paul Russell writes about his 3-yearly laptop replacement at IBM [1]. It probably makes some sense to replace laptops periodically for a large company, but if you are buying for[...]
I Am #40 in Don Marti’s ListI Am #40 in Don Marti’s List
Don Marti has written his own equivalent to Technorati based on links from blogs that he reads, and my blog comes in at #40 in the list (last place) [1].[...]
Can SE Linux Stop a Linux StormCan SE Linux Stop a Linux Storm
Bruce Schneier has just written about the Storm Worm [1] which has apparently been quietly 0wning some Windows machines for most of this year (see the Wikipedia page for more[...]
Executable Stack and Shared ObjectsExecutable Stack and Shared Objects
When running SE Linux you will notice that most applications are not permitted to run with an executable stack. One example of this is libsmpeg0 which is used by the[...]
Reducing Automated AttacksReducing Automated Attacks
I read the logs from my servers. The amount of time I spend reading log summaries is determined by how important the server is. On the machines that are most[...]
Public Security CamerasPublic Security Cameras
There is ongoing debate about the issue of security cameras, how many should there be, where should they be located, and who should be able to access the data. I[...]
Ideas for a Home UniversityIdeas for a Home University
There seems to be a recent trend towards home-schooling. The failures of the default school system in most countries are quite apparent and the violence alone is enough of a[...]
Xen Memory Use and ZopeXen Memory Use and Zope
I am currently considering what to do regarding a Zope server that I have converted to Xen. To best manage the servers I want to split the Zope instances into[...]