Security :: Joanna Rutkowska Releases 'Qubes' Hardened OS?
Apr 7, 2010
Joanna Rutkowska, a security researcher known for her work on virtualization security and low-level rootkits, has released a new open-source operating system meant to provide isolation of the OS's components for better security.
The OS, called Qubes, is based on Xen, X and Linux and is in a basic, alpha stage right now. Qubes relies on virtualization to separate applications running on the OS and also places many of the system-level components in sandboxes to prevent them from affecting each other.
View 1 Replies
ADVERTISEMENT
Sep 24, 2010
Basically, out of the box, is SUSE hardened to meet DISA STIG compliance? along with the question came a 500 page UNIX Security checklist I am not looking forward to reading through nor typing 5000 commands.
View 1 Replies
View Related
Dec 14, 2010
I'm tasked with creating a base image of ubuntu (one for server, one for workstation) that is locked down and has all the fluff taken out (naturally workstation will have more fluff left in it than server). Task list looks about like this:
1. Create list of deb packages "allowed", write script to list/uninstall everything else.
2. Hook the logins into either enterprise kerberos or Active Directory (yuck).
3. Write scripts to check things like setuid/setguid, disabling su, checking sudo permissions, configure iptables, etc.
4. Use a scanner to scan the system from outside the system (was thinking of using backtrace).
5. Custom-compile the kernel to strip out all the unneeded modules.
Before embarking on this awesome task I figured I'd check with you guys to see if you know of some resources that would make this task easier/quicker. I'm sure someone out there has already headed down this branch.
PS My boss *loves* ubuntu and isn't to keen on going with a deb (or other) distro that is already "security trimmed" without some serious convincing. I'm sure there are some out there, and if you want to pass along a couple for consideration, I'll check them out, but no guarantees he'll let me use it.
View 4 Replies
View Related
Jan 14, 2010
My MythTV system is running under F12. It is in "appliance mode;" all configured and happily doing the PVR thing without a pressing need for upgrades.However, there is a feature in the upcoming 2.6.32 kernel that I'd like to take advantage of; internal support for a certain capture card.
I see 2.6.32 mentioned as part of the F13 release. My question is, will it also be available for F12 . . . maybe sooner than the F13 release?Another way to put this is: How wedded are Fx releases and kernel releases? Is a major kernel goalpost like 2.6.32 the reason why Fx releases are made?
View 1 Replies
View Related
Dec 16, 2010
So yea, why are there so many repositories for the same source (playdeb for example) that specify lucid from maverick or karmic? Why doesn't the repository work on Lucid if it's a repository for Maverick? A big question is why I can't get access to playdeb's stuff on a Lubuntu installation.
View 4 Replies
View Related
Mar 13, 2010
My DB-Vendor supports only Centos 5.2 till now, and i can't find the old releases of centos on this website. Is there an archive with the old versions?
View 4 Replies
View Related
Jan 6, 2010
i wondered why softwares have different packages for different Ubuntu releases. for example: Miro for Karmic, Miro for Jaunty, Miro for Intrepid, ...[URL]
View 2 Replies
View Related
Sep 7, 2010
How do I install a specific one? Or better yet, revert back to an earlier release.
I have two systems running.
2.6.31-22-generic #60-Ubuntu aphrodite release
2.6.31-22-generic #63-Ubuntu amaterasu release
I googled the #60 and #63 and it listed release names highlighted above, is this correct?
If it is, how can I install the aphrodite release?
I have one system working great (#60), while the other exhibits problems playing back 1080p video files (#63). The only HW difference that could affect the dropping frames is the 8200/8300 Nvidia chipsets (with the 8200 working perfectly) and then of course the Karmic releases. I have re-installed the system and files twice and even upgraded new releases of Nvidia drivers (195 > 256) with no success.
My next step is to try and install the same exact release of Karmic if indeed there is a difference between #60 and #63.
My next step might be to use clonezilla and clone the OS (Root) and try that. But then the chipsets for sound are different as well as the ehternet chipset. But that shouldn't impair the video.
View 3 Replies
View Related
May 10, 2009
June 12, 2011. It appears that quite a few of the alternative repositories that I've suggested in the posts below are no longer functional. Rather than flog a dead horse I'm closing this thread and strongly suggest that you use a supported release of Fedora.The Fedora releases here, Fedora Core 1 through Fedora 12, are no longer supported or maintained, so they do not receive bug fixes or security updates. We do not recommend using these releases any more. I've spent the last day or so installing every Fedora release since Fedora Core 1, excluding Fedora 11, on a computer I had laying around. My goal was to figure out how to get yum to work despite the fact that the stock repositories are long gone in most cases.
I was motivated by the fact that the yum questions are never ending here at Fedora Forum and the question of how to make yum work for these older versions of Fedora seem to be quite common. The usual response is to install the newest and greatest Fedora. That's fine, but there are cases where this is just not possible. I'll outline separately what I've done for each release. You will only get one update, however, you should be able to install any software that is available through these repositories. You could consider adding other repositories if you need additional software.
View 14 Replies
View Related
Jan 16, 2010
I've been using the 64bit version of fedora since release 10. I want to know what exactly makes the diffrence between the 32bit and the 64bit releases. I am having some troubles recently regarding some drivers and other issues in my fedora 12 and I was thinking of moving to the 32bit one,
here are my PC's specs:
CPU C2D Intel 2.6
4 GB RAM
NVidia 8500GT
Nvidia 9500GT
I've managed to use the 32bit apps by installing the 32bit compatibility packages.
View 3 Replies
View Related
Aug 16, 2011
http://www.theinquirer.net/inquirer/...leases-firefoxYawn, didn't they just release FF5 a few days ago? Yes, I know when it was released, just being sarcastic!
View 14 Replies
View Related
Jun 12, 2010
if I have a kernel that does not automatically update because I installed it from a deb, will I be missing out on important security updates or the like? I installed the 2.6.34 kernel because I wanted trim support, but am very concerned that I will miss something important.
View 1 Replies
View Related
Sep 10, 2010
"Broadcom would like to announce the initial release of a fully-open Linux driver for it's latest generation of 11n chipsets. The driver, while still a work in progress, is released as full source and uses the native mac80211 stack. "
View 4 Replies
View Related
Jun 17, 2010
I want to track 2.6.33 kernel releases. I can see that kernel.org has couple of releases like rc1, rc2,rc3, git<>. Kernel 2.6.33. got released early Feb this year.
So How many releases of kernel 2.6.33 were there? I checked at kernel.org but couldn't find the complete information.
View 2 Replies
View Related
Aug 10, 2010
We (like many people) have a QA environment and a production environment consisting of several servers. We want to be able to make sure before we do any yum updates on the production machines that we've tested everything in QA. Unfortunately, yum gets the latest software when you run it, so you could run it two hours apart and up with different releases of some software. We need a solution.
I *think* what I have to do is create my own yum repository. There are a variety of articles on how to do that. But before I go through all that, I wanted to make sure I was on the right track. So the process would probably end up being:
1. Create a fresh repository
2. Upgrade QA from that repository, test, etc.
3. Upgrade production from that repository
Can someone verify this is the correct approach, or is there something easier? It also seems like step 1 is going to take a significant amount of time, plus it will continue to take a significant amount of time every cycle.
View 3 Replies
View Related
Oct 31, 2009
I have been having mysterious problems with my comp recently and I think it might have to do with my OS not releasing filespace. Previously, my OS partition was full, then I deleted/moved some files, but now it says that still no space is available:
[root@cluster log]# df -h (simplified):
Filesystem Size Used Avail Use% Mounted on
/dev/sda1 7.9G 7.6G 0 100% /
/dev/md0 459G 110G 327G 26% /export
[root@cluster log]#
The OS being /dev/sda1 (I am 99% sure, didn't set it up originally) and is CentOS4. As you can see, I have only used 7.6GB, and I should have 300MB available. Only thing I can think of is that when it was full, I moved matlab from there to the /export drive and added in a symbolic link to where it was on the OS drive so it would still work ok. Could this be why the space is not being freed up? We are in the process of installing a 16TB drive so we can free up some space or expand the partition, but somebody else here at work is handling that, so some other option that I could do would be best.
View 5 Replies
View Related
May 12, 2010
In a local network, a connection with freenx conencts with the arrow keys working In a remote system, arrow keys dont
View 4 Replies
View Related
Feb 22, 2010
I had no enough space under /boot & i tried to resize this patition without success. A Linux-user's told to me that it is possible to erase the latest kernel releases but i have no idea about this think.
View 2 Replies
View Related
May 11, 2011
I have been a happy Ubuntu user for several years. But I am stuck with version 9.10 because of a persistent problem with random lockups with both mouse and keyboard. A search on the forums both within and without the Ubuntu community shows that a lot of other people have this same problem. There have been a lot of suggestions given and I have tried everything I could find, but without success. I have tried clean installs of vs. 10.04, 10.10, and 11.04 but all have the same problem.
The computer will work fine for a few minutes to a few hours and then just lock up. The only way out is a hard reset. Someone suggested that the latest versions of Ubuntu have a problem with some of the newer Intel chipsets, but I don't know enough to be able to say one way or the other. I am running an ASUS P7P55D motherboard with a 4 core Intel i5 processor and an Nvidia graphics card. I have tried the latest version of the bios for the P7P55D but that hasn't helped either. Vs 9.10 is no longer supported and I am being left behind.
View 5 Replies
View Related
Sep 16, 2010
Adobe releases preview of flash 64 bit for all platforms?[URL]..
View 1 Replies
View Related
Sep 16, 2010
The new file can be downloaded here. (32 bit is available as well) I have installed it already, and it works on vimeo and ......
View 14 Replies
View Related
Jun 18, 2010
I am using an Nvidia GeForce FX5200 card and nvidia hasn't released a driver that seems to work with it in Fedora 13 yet.. However, I decided to do an install of F13 and use the nouveau drivers until Nvidia updates their drivers, however, the nouveau drivers don't work worth a crap with my card I did a fresh install and then ran a yum update. What I am seeing is after a few minutes, all the icons disappear, no fonts, and nouveau starts throwing errors to my message log. Here are the messages I get:
[Code]...
View 2 Replies
View Related
Sep 27, 2010
Is there any way to keep a local install of Fedora current will all the latest releases? example If I'm running F13, is there a failsafe method to have F13 become F14 with out all the drama of reformatting and installing off the dvd? In the past all my attempts have failed, possibily due to having multiple repos is use and kernel patches applied (nvidia central).
View 8 Replies
View Related
Dec 23, 2010
I am eagerly awaiting my newly purchased lenovo sl510 and once received intend on loading opensuse 11.3 onto it as my primary os. I understand this particular laptop has had some issues with acpi.
Can anyone comment on how this is now with newer kernel releases since the default installed with the opensuse 11.3 DVD.
View 9 Replies
View Related
Feb 6, 2010
I'm not getting a response over on the Ubuntu WIreless Forum (which looks like it's getting slammed with questions), and weigh in on whether or not you believe I have a hardware failure on my hands? As I state in the post, I ran fine from the original installed version, 8.10, through 2 upgrades (to 9.04 and 9.10). Now none of them work (When the problems began I re-installed each of them in turn in order to test).
View 2 Replies
View Related
May 14, 2010
I am looking for a way to track updates or changes to open source software, in other words I want automatic notification when new releases are made.
Is there any single place or easy way to do that? Again, What I am looking for is notification when, for example, firefox ver 3.1.2 is released, or when kde releases 4.4.5, k3b makes a major change, etc, etc, etc.
Anyone have any idea how I could accomplish this?
View 13 Replies
View Related
Apr 13, 2011
I'm trying to install Debian 6.0.1a (64bit) onto a machine that had Debian 5.08. It freezes up almost immediately after loading the kernel. The last line, about 2.6 seconds in, is where it found a SATA drive. (There are two SATA drives). This is a Tyan S2912 with Opteron 2347HE. It seems to be kernel release related. I tried the 5.08 disc again, and it works OK.
With other distros, such as Opensuse and Ubuntu, I have the same problem. The newer releases freeze up almost instantly after loading the kernel. Am I stuck with IDE drives or older kernels? I wanted to try something newer as the fonts in the 5.0.8 release were barely legible. It gave me nauseating headaches within a couple of hours of looking at it. My wife couldn't stand to see it when she came by. I've tried every bios setting change I could think of without a solution.
View 6 Replies
View Related
Feb 7, 2011
Would someone be able to point me in the direction to find a list of update releases for Redhat Linux v5?
View 1 Replies
View Related
Mar 15, 2010
Has anyone else noticed an increase in file size of ripped CD tracks to MP3 between previous releases of Ubuntu and Karmic? Specifically using the same Gstreamer pipeline settings the file size in Karmic is now considerably larger than in previous releases like Jaunty or Intrepid. Is there a fix for this bug. Seems like Sound Juicer/Rhythmbox have some significant bugs in Karmic!
View 2 Replies
View Related
May 25, 2009
I'm still on F9, finally hoping to move to F10 today via preupgrade, but the second screen in the preupgrade GUI say "No releases available for upgrade" under "Available Fedora Releases"
View 6 Replies
View Related
