Speaker: Crispin Cowan Director of Software Engineering, SUSE/Novell The core of the security problem is that most software contains latent bugs, and many of these bug can be exploited by attackers to cause the software to do something undesirable to the victim's computer. To block this threat, one can either use only perfect software (of which there is a shortage :) or use a security system to control what software may and may not do. The problem is that such systems are historically very difficult to use. AppArmor is an application security system that directly attacks the ease of use problem, making it possible for widespread adoption by developers, system administrators, and users. AppArmor provides for security profiles (policies) that specify the the files that a given program may read, write, and execute, and provides tools to quickly and automatically generate these profiles. This presentation will briefly introduce the AppArmor system, and then spend much of the time showing how to best use AppArmor to confine applications and protect systems. AppArmor is pure GPL software, and is available for SUSE, Slackware, Ubuntu, Gentoo, and Red Hat Linux. For more information visit: bit.ly To download the video visit: bit.ly DEFCON 15:...
i386 episode 4 - AppArmor: Crispin Cowan talks about using AppArmor security system, and show how to use it to protect Linux systems LCA07: AppArmor
Configuring an apparmor profile for a mono application on Ubuntu. Mind you! An application can NEVER use a dot in its name (as .exe) because apparmor uses the dot as a directory indicator. Creative Commons Music: Donniedrost -Lully Lullay (feat. Ciggi Burns) ccmixter.org Configuring an...
This video is part of the Infosec Video Collection at SecurityTube.net: www.securitytube.net Defcon 15 - Securing Linux Applications With AppArmor http The core of the security problem is that most software contains latent bugs, and many of these bug can be exploited by attackers to cause the software to do something undesirable to the victim's computer. To block this threat, one can either use only perfect software (of which there is a shortage :) or use a security system to control what software may and may not do. The problem is that such systems are historically very difficult to use. AppArmor is an application security system that directly attacks the ease of use problem, making it possible for widespread adoption by developers, system administrators, and users. AppArmor provides for security profiles (policies) that specify the the files that a given program may read, write, and execute, and provides tools to quickly and automatically generate these profiles. This presentation will briefly introduce the AppArmor system, and then spend much of the time showing how to best use AppArmor to confine applications and protect systems. AppArmor is pure GPL software, and is available for SUSE, Slackware, Ubuntu, Gentoo, and Red Hat Linux. Defcon 15 -...
Hello to my new vendor-sec visitors! Haven't we learned yet that the kernel can do whatever it wants? Guess not ;) Once I own the kernel (which SELinux does nothing to prevent), I just destroy everything (SELinux, AppArmor, LSM, auditing, and more!), in honor of the curse of Cheddar Bay! 100% reliable too BTW, you can exploit the same machine as many times as you like. No alerts, no warnings, and this weekend it will work on x64 too. Linux 2.6.30+...
Here's an updated video of the exploit, this time against an ubuntu 64bit machine Though the machine I tested on wasn't using SELinux (which as noted in the video actually made the exploit more difficult), I did update the code so that it can disable SELinux and fake it still enforcing in the same way for the 64bit version (patching a mov ecx, [rip+off] instead of an indirect push in the previous one) Oh, and based on a suggestion, this one has music ;p Linux 2.6.30+...
Wow, a repository (more like suppository amiright) that is missing data. Good thing you can easily access software with package managers! DERP No apparmor...
FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software. More info at fosdem.org FOSDEM 2006 apparmor
Ubuntu UDS P Orlando Track - AppArmor Development and Integration Ubuntu UDS P...
UDS N Orlando - Track AppArmor Planning UDS N AppArmor...
That's right, stupid--go to: iOS: bit.ly Android Censored: bit.ly Android Uncensored: bit.ly to get your honey badger game app right now! Ever wonder what it's like to be an actual honey badger? Well now you can try! I had the fabulous good fortune to partner up with Medl Mobile to create this amazing app! So start digging and keep your honey badger well fed--go to the Apple store and get your game app right now!!! Honey Badger...
Dnes si ukážeme AppArmor kontra virus v akci Jak spouštět...
working out ideas for a character using the brushes app on my ipod touch Brushes App -...
Novell AppArmor - apsaugos sistema, programų, procesų stebėjimui ir kontroliavimui. Novell AppArmor...
*watch in HD fullscreen* Exploits the vulnerability in all Linux kernels since 2001. Exploit works on all kernels since 2001. Disables SELinux, AppArmor, LSM -- you know the drill. I had planned for this exploit to be more interactive, involving a simulated russian roulette (hence the video) where there would be a 1 in 6 chance of instead of the box being compromised, it would hot reboot into FreeDOS. Unfortunately I lack the time needed to realize this dream. The video displayed is embedded in the exploit binary and extracted/played at runtime. Exploit (for a possibly false-negative test of vulnerability of your own machine) is at grsecurity.net Mr Magorium's...
Danil Zburivsky (The Pythian Group) speaks at the 2010 O'Reilly MySQL User Conference & Expo on Security Around MySQL Slides - assets.en.oreilly.com From the official conference description at: en.oreilly.com In this talk well look at the different ways to compromise MySQL security in typical deployment scenarios through vulnerabilities in the underlying hardware, the operating system, applications, and the network. We will not be focusing just on security from hackers, but from internal sources as well who may be intending to steal data. Some of these methods include: * using memory dumps/straces to extract encryption keys/encrypted disk data * using DRAC/RSA cards to gain access to secure servers * gathering passwords at the switch layer. Well also discuss ways to prevent these attacks on the MySQL data including: * encryption both at the network and disk level * advanced access controls including AppArmor and SELINUX * network security Security Around...
Artfinder (www.artfinder.com), the home for art on the web, is launching its first fine art image recognition iPhone app in July. This is the first test of the app at the Dulwich Picture Gallery's Cy Twombly/Nicholas Poussin exhibition in London. Artfinder's fine...
Van Linux Magazine 5 van 2010 tot editie 1 van 2011 was de serie Linux Desktop Security te lezen, geschreven door Roland de Greef. Hierin legt hij uitvoerig uit met welke beveiligingsrisico's je te maken hebt op Linux en welke tools er beschikbaar zijn om je daar tegen te wapenen. Naar aanleiding van deze serie gaf Roland de Greef een lezing op de HCC!Linux Themadag 2011 over AppArmor, SELinux en mandatory access controls. De artikelenserie uit Linux Magazine is gebundeld in het Dossier Security & Linux dat te downloaden is op www.linuxmag.nl/info.html. Security & Linux...
Van Linux Magazine 5 van 2010 tot editie 1 van 2011 was de serie Linux Desktop Security te lezen, geschreven door Roland de Greef. Hierin legt hij uitvoerig uit met welke beveiligingsrisico's je te maken hebt op Linux en welke tools er beschikbaar zijn om je daar tegen te wapenen. Naar aanleiding van deze serie gaf Roland de Greef een lezing op de HCC!Linux Themadag 2011 over AppArmor, SELinux en mandatory access controls. De artikelenserie uit Linux Magazine is gebundeld in het Dossier Security & Linux dat te downloaden is op www.linuxmag.nl/info.html. Security & Linux...
Van Linux Magazine 5 van 2010 tot editie 1 van 2011 was de serie Linux Desktop Security te lezen, geschreven door Roland de Greef. Hierin legt hij uitvoerig uit met welke beveiligingsrisico's je te maken hebt op Linux en welke tools er beschikbaar zijn om je daar tegen te wapenen. Naar aanleiding van deze serie gaf Roland de Greef een lezing op de HCC!Linux Themadag 2011 over AppArmor, SELinux en mandatory access controls. De artikelenserie uit Linux Magazine is gebundeld in het Dossier Security & Linux dat te downloaden is op www.linuxmag.nl/info.html. Security & Linux...
Unix, родившийся практически вместе с первыми компьютерами, использовал очень простой механизм безопасности (ugo), который гуру семидесятых посчитали более чем достаточным. Но в современной системе крутятся десятки демонов и программ, запущенных из-под разных учеток, и грамотно разрулить все права старыми инструментами уже не получается. Тут на помощь приходит AppArmor, с которым мы и познакомимся в этом ролике. Гонка...
Show notes available at: www.thisweekinlinux.com Also, check out my 2nd channel I'm working on: youtube.com Thanks for watching! Buy My T-Shirts! twil.spreadshirt.com & http My Website: www.thisweekinlinux.com My Facebook Page apps.facebook.com My Twitter: www.twitter.com My IRC Channel: #twil on irc.freenode.net Music provided by Kevin MacLeod of incompetech.com Ubuntu 10.10...
Brief update on how SUSE* Linux Enterprise 11 Service Pack 1 (SP1) based on Intel(R) hardware delivers the industry's broadest virtualization capabilities, powerful advances in high availability clustering, and more flexible maintenance and support options.BIO: Frank Rego, Senior Product Manager, NovellFrank Rego is a Senior Product Manager in Novell's Open Platform Solutions business unit and is responsible for managing the technical collaboration with Microsoft. Frank joined Novell from Immunix, a startup company that developed the AppArmor security technology for Linux which is now an integrated piece of the SUSE Linux Enterprise platform. Frank has an engineering degree from the University of California at Berkeley, and an MBA from Portland State University. SUSE* Linux...
Exploit kernel Linux provato su Ubuntu 10.10 Exploit kernel...

Strona: 1 of 3

Nastepna strona