-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Linux Vendors Increase Security Features
,----[ Quote ]
| Analysis: Red Hat, Canonical and Novell are enhancing the security features
| in their Fedora, Ubuntu and OpenSUSE Linux distributions, which are all
| slated for release later in 2008.
|
| [...]
|
| What's more, full-disk encryption, unlocked by a single pass key, poses
| problems for multiuser machines, in which the disk unlocking is an
| all-or-nothing proposition, as opposed to a user-by-user measure.
|
| As implemented in Ubuntu 8.10, the encrypted private directory feature
| creates a folder—labeled "Private"—in users' home directories. The system
| automatically encrypts files placed in this directory and unlocks the
| directory upon user log-on.
`----
http://www.eweek.com/c/a/Linux-and-Open-Source/Linux-Vendors-Increase-Security-Features/
Let PAM take care of GNU/Linux security for you
,----[ Quote ]
| If each Linux program had to include its own authentication logic, we'd go
crazy. How could you trust that all your applications implemented the same
checks? And how could you implement extra controls?
`----
http://www.linux.com/feature/149986
Recent:
SELinux and Security changes in the 2.6.27 Kernel
,----[ Quote ]
| # SELinux deferred mapping of filesystem contexts
| This patch by Stephen Smalley addresses the case where "alien" SELinux
| security labels need to be written to the local filesystem, for example, in
| the case of building RPMs where the local policy is different to the policy
| on the system where the RPM is to be installed. This will help with enabling
| SELinux on build systems (e.g. in the Fedora infrastructure) and more
| generally with packagers and ISVs shipping third party policy with RPMS.
`----
http://james-morris.livejournal.com/35287.html
Ubuntu gets SELinux
,----[ Quote ]
| It's official: SELinux is now available in the Ubuntu development ("Hardy
| Heron") distribution. "This is the result of the amazing work of the
| ubuntu-security and ubuntu-hardened teams, as well as the huge contributions
| from the folks at Tresys. (note: SELinux will not be the default, but is
| available as a security option.)" Installing it is a simple apt operation.
`----
http://lwn.net/Articles/273992/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkj15PQACgkQU4xAY3RXLo4UtACdE6tA1jvA7xlEo3p+3SY4WvIo
PI8An3HfpIWXhHx9Umug3BMEchWrvDT7
=3K4t
-----END PGP SIGNATURE-----
|
|
