#linuxsecuritysummit — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #linuxsecuritysummit, aggregated by home.social.
-
I gave a (2nd) talk at #linuxsecuritysummit on a new configuration format, #Landlock Config, to define sandboxing security policies. The provided library (Rust and C for now) can also compose configurations to ease sharing and maintenance. This is especially useful to sandbox programs without modifying them, and to easily manage and audit Landlock policies. It could also be part of other configuration formats such as the OCI runtime specification.
https://lsseu2025.sched.com/event/25GET -
Script integrity: I gave a talk at #linuxsecuritysummit in Amsterdam on the latest news about Linux's AT_EXECVE_CHECK, useful to check the full file executability (including LSMs' policies), and the two new secbits to incrementally enforce restrictions and really control executable code.
Feel free to let me know if you want to contribute by enlightening your favorite interpreter!
https://lsseu2025.sched.com/event/25GEQ -
Update on #Landlock: IOCTL Support - Günther Noack at #LinuxSecuritySummit Europe 2024 https://sched.co/1ebVW
-
#Landlock now has a logo! I'm at #OSSummit Europe, #LinuxSecuritySummit Europe, and #LinuxPlumbers this week in Vienna. If you're there, Günther, Tahera and I have some stickers to give 🤓
https://github.com/landlock-lsm/landlock-logo -
But to mention some positive, LSS and LPC looks 🔥 this year.
Tiny bit of SOSS sprinkled into it as well.
-
Flights booked for #LinuxSecuritySummit, #LinuxPlumbers and #allsystemsgo ✅
-
"#Landlock Workshop: Sandboxing Application for Fun and Protection" at #linuxsecuritysummit Europe: https://sched.co/1OLAi
A practical sandboxing use case illustrated with the #ImageTragick vulnerability. All you need to build, test and patch: https://github.com/landlock-lsm/workshop-imagemagick -
"An interpreter in the kernel is a security threat"
#linuxsecuritysummit
https://sched.co/1OMgU -
Saw a lot of Aurora flying over Greenland on the way to Linux Security Summit EU. This is the best I could do with an older iPhone #linux #linuxsecuritysummit #space #spaceweather #hamradio #amateurradio -
Here are the slides and demo videos from my #linuxsecuritysummit talk about Hypervisor-Enforced Kernel Integrity for Linux, powered by KVM: https://github.com/heki-linux
-
I talked about script execution control (O_MAYEXEC, trusted_for, and a new proposal) at #linuxsecuritysummit
Slides are now online: https://sched.co/1K7bO -
Today the AWS "Find and Fix" (F2) security research team released Snapchange, a new open source project to make snapshot-based fuzzing much easier.
#OpenSource #OSSummit #LinuxSecuritySummit #Fuzzing #Linux #KVM
https://aws.amazon.com/blogs/opensource/announcing-snapchange-an-open-source-kvm-backed-snapshot-fuzzing-framework/