SecureCon LectureSecureCon Lecture
On Thursday at Secure Con [1] I gave a lecture about SE Linux that went according to plan, and they gave me a nice bottle of Penfolds Shiraz afterwards (thanks[...]
Tag: Selinux
SecureCon TutorialSecureCon Tutorial
My SecureCon tutorial went quite badly today. After having network problems and having both the Xen servers crash for no apparent reason I had to give up and give an[...]
Xen for TrainingXen for Training
I’m setting up a training environment based on Xen. The configuration will probably be of use to some people so I’m including it below the fold. Please let me know[...]
Squid and SE LinuxSquid and SE Linux
Is Squid not returning some data you need on a SE Linux system? The default configuration of the SE Linux policy for Squid only allows it to connect to a[...]
SecureCon 2007SecureCon 2007
I am running a tutorial and giving a talk about SE Linux at SecureCon 2007 [1]. The tutorial will go for 3 hours on Wednesday the 7th of November and[...]
New SE Linux Play Machine OnlineNew SE Linux Play Machine Online
After over a year I have finally got a SE Linux Play Machine online again. The details for logging in are at this link [1]. I’ve created T-shirt and mug[...]
Xen and SecurityXen and Security
I have previously posted about the difference between using a chroot and using SE Linux [1]. Theo de Raadt claims that virtualisation does not provide security benefits [2] based on[...]
My SE Linux Etch RepositoryMy SE Linux Etch Repository
deb http://www.coker.com.au etch selinux The above sources.list line has all the i386 packages needed for running SE Linux with strict policy on Etch as well as a couple of packages[...]
AUUG 2007AUUG 2007
Today was the final day of the AUUG 2007 conference [1]. Yesterday I gave a talk about SE Linux for about an hour (not sure exactly as I forgot to[...]
Execmem and SE LinuxExecmem and SE Linux
Eddy writes about problems getting the game oolite to run under SE Linux [1]. Strangely after I fixed the shared object issue with libffcall1 (as described in my previous post[...]