Creating a SE Linux Chroot environmentCreating a SE Linux Chroot environment
Why use a Chroot environment? A large part of the use of chroot environments is for the purpose of security, it used to be the only way of isolating a[...]
Links July 2010Links July 2010
David Byrne gave an interesting TED talk about how changes to architecture drove changes to musical styles [1]. I think he does stretch the point a little. To a certain[...]
SE Linux status in Debian/SqueezeSE Linux status in Debian/Squeeze
ffmpeg I’ve updated my SE Linux repository for Squeeze to include a modified version of the ffmpeg packages without MMX support for the i386 architecture. When MMX support is enabled[...]
SE Linux audit2allow -R and Milter policySE Linux audit2allow -R and Milter policy
Since the earliest days there has been a command named audit2allow that takes audit messages of operations that SE Linux denied and produces policy that will permit those operations. A[...]
Digital Video CamerasDigital Video Cameras
I’ve just done some quick research on Digital Video Cameras for some relatives. It seems to me that the main feature that is necessary is Full HD (1920*1080) resolution as[...]
Tracking down Write/Execute mmap() calls with LD_PRELOADTracking down Write/Execute mmap() calls with LD_PRELOAD
One of the access controls in SE Linux is for execmem – which is used to stop processes from creating memory regions that are writable and executable (as they make[...]
Is Lebara the Cheapest Mobile Phone company in Australia?Is Lebara the Cheapest Mobile Phone company in Australia?
My parents have just got a mobile phone with a Lebara pre-paid SIM [1]. Lebara advertise free calls to other Lebara phones but have a disclaimer that they charge a[...]
libcsoap/libnanohttplibcsoap/libnanohttp
Recently I have been doing a bit of work on libcsoap (the C library for making SOAP XML calls over http) and the libnanohttp library that it depends on. The[...]
Play Machine Online Again with Xen 4.0Play Machine Online Again with Xen 4.0
My SE Linux Play Machine [1] has been offline for almost a month (it went offline late May 30 and has just gone online again). It’s the sort of downtime[...]
New SE Linux Policy for SqueezeNew SE Linux Policy for Squeeze
I have just uploaded refpolicy version 0.2.20100524-1 to Unstable. This policy is not well tested (a SE Linux policy package ending in “-1” is not something that tends to work[...]