Several Linux security events are planned in association with LinuxCon this year in Portland, Oregon.

• 2009 SELinux Developer Summit
  The CFP for this event has just been published. The developer summit will be held on the 20th of September as an ancillary event of LinuxCon. This is a one-day event, and developers are encouraged to submit proposals ( Read more... )

The sVirt code has now been merged into the upstream libvirt repository (git mirror). Thanks to Dan Walsh for taking on the remaining userspace development, and Daniel Berrange and the rest of the libvirt folk involved for reviewing and improving the code ( Read more... )

Some videos from LCA 2009 have been posted online, per this email from Mary Gardiner.

The video from my sVirt (MAC security for Linux virtualization) talk is available as an OGG file. I've also re-uploaded it as a google video.

I'd suggest having a copy of the slides open when watching, as they're not always shown in the video, and you're ( Read more... )

The slides from my LCA talk on sVirt talk may be found here in PDF format.

The talk seemed to go reasonably well, and had a larger audience than I expected given that Tridge and Willy were talking at the same time. A video of the talk should appear online soon.

I'm preparing to travel to Hobart for LCA next week, which will be a refreshing break from the 40° heat in Sydney, and from conference jet lag-this will my first same-timezone conference in a couple of years, and the closest I've ever been to Antarctica.

I'll be giving a talk on sVirt, a project to harden Linux-based virtualization with MAC ( Read more... )

Here's an update on the main functional changes in security for the recently released 2.6.27 kernel.

• SELinux deferred mapping of filesystem contexts
  This patch by Stephen Smalley addresses the case where "alien" SELinux security labels need to be written to the local filesystem, for example, in the case of building RPMs where the local policy is ( Read more... )

It seems the videos from the recent LF Japan Symposium are up, including my talk on the SELinux project (139MB FLV). It's really odd seeing yourself giving a talk -- I'm making myself watch so I can see what to try and improve in the future.

And yes, "so" is totally the new "um".

The SELinux Developer Summit went pretty well yesterday. It was a long day: 10 hours of talks and discussions with about forty developers attending.

I've just uploaded slides from the talks, which may be found next to their respective entries in the schedule.

Some of the talks I found particularly useful/interesting:

• Josh Brindle on SELinux in ( Read more... )

What's new and exciting with SELinux and security in the new 2.6.26 kernel? Expanding some of the items from the excellent Kernel Newbies 2.6.26 page:

• security= boot parameter
  This patch by Ahmed Darwish allows a particular security module to be selected at kernel boot time, so that distributions can ship multiple security modules and allow the ( Read more... )

I'll be giving a talk on the SELinux project at the next Linux Foundation Symposium in Japan, to be held 9th and 10th of July. Details of the symposium are here in Japanese, while a PDF schedule in English lives here.

From the abstract for my talk:
This talk will provide an overview of the project, covering its rationale, design goals, and ( Read more... )