A blog of all section with no images
Backporting of security fixes PDF Print E-mail
Written by Linux   
Wednesday, 18 April 2007

The term 'backporting' describes when we take a fix for a security issue out of the most recent version of a product, and apply that fix to an older version.

Backporting is common practice amongst software vendors such as Red Hat and is essential to ensuring that we can deploy automated updates on systems. However, backporting has not been given much attention and will be a new concept to people more familiar with proprietary software.

Last Updated ( Thursday, 19 April 2007 )
Read more...
 
SSH Port Forwarding PDF Print E-mail
Written by Linux   
Tuesday, 08 August 2006

Introduction

SSH is typically used for logging into remote servers so you have shell access to do maintenance, read your email, restart services, or whatever administration you require. SSH also offers some other native services, such as file copy (using scp and sftp) and remote command execution (using ssh with a command on the command line after the hostname).
Read more...
 
Linux security strong as ever PDF Print E-mail
Written by Linux   
Tuesday, 08 August 2006

Linux security is as strong as ever, despite recent statistics that say otherwise.
Perhaps in response to the excessive publicity given to the strong security associated with Linux and open source software, it's no surprise that a number of commentators are making a high-profile argument that Linux, just like every other platform, does indeed have security issues. Members of the open source community have always known that Linux is not immune from security threats, so there is no argument there. What is in question is the final conclusion that these commentators are drawing, which is that Linux is less secure than Microsoft Windows.


Read more...
 
New user a security nightmare PDF Print E-mail
Written by Linux   
Tuesday, 08 August 2006

Safe computing outside the corporate perimeter
Employees logging into corporate networks from home PCs over public broadband connections are now commonplace. As a result, security software and hardware that once did a fine job of guarding sensitive systems looks increasingly vulnerable. That's because all these remote networkers, be they employees or partners, are no longer snuggly inside the "official" data-security perimeter.



Read more...
 
Make 2003 more secure PDF Print E-mail
Written by Linux   
Tuesday, 08 August 2006

The challenges to info-tech security will surely be daunting, and companies' efforts to stay safe will have to keep increasing.
With holiday cookies and sweets still being shared around offices everywhere, security is the least of concerns these days as most businesses are thinking merry, not wary. So what better time to examine the year ahead for what to expect in terms of computer security? First, 2003 will surely pose some pretty daunting challenges to chief security officers and the organizations they protect. At the same time, improvements in software and technology will elevate computer security to another level. Here's a quick rundown of what to expect:



Read more...
 
Training for Security-Enhanced Linux PDF Print E-mail
Written by Linux   
Tuesday, 08 August 2006
The Open Source Development Group (OSDgroup) has developed courseware for Security Enhanced Linux, the National Security Agency's beefed-up Linux distribution that is also being developed as a commercial distribution by Westcam Consultants.


OSDgroup is working with Westcam to promote an upcoming commercial release of SELinux. Proprietor Mark Westerman told developers that the release is RPM based, and it is for "people that might not want to compile and install the kernel." The government's SELinux, which is freely available for download, must be installed over top of an existing Red Hat install; it is basically a custom kernel configuration. Westcam's implementation of SELinux is not endorsed or sponsored by the National Security Agency (NSA).
Westerman says that Westcam's distro is completely GPL'ed and they will not put any proprietary code in there. Additionally, developers are working to convert the security rules to XML in order to handle policies more efficiently. The beta of Westcam's SELinux is available by mail order.

Last Updated ( Thursday, 19 April 2007 )
Read more...