Here's an update on the major changes to the kernel security subsystem for the 2.6.30 kernel.

• TOMOYO
  The TOMOYO security framework from NTT was merged. This is the first significant LSM scheme to be merged since SELinux in 2003. TOMOYO is characterized by its targeting of non-technical users, where security policy is automatically generated with ( Read more... )

Here's an update on some of the main changes to the security subsystem in the 2.6.29 kernel.

Most of the changes for this kernel relate to infrastructure work and maintenance:

• Task Credentials APIThis is a rewrite of the kernel mechanism for managing per-task credentials. David Howells has been working on this for quite some time, significantly ( Read more... )

The sVirt code has now been merged into the upstream libvirt repository (git mirror). Thanks to Dan Walsh for taking on the remaining userspace development, and Daniel Berrange and the rest of the libvirt folk involved for reviewing and improving the code ( Read more... )

Some videos from LCA 2009 have been posted online, per this email from Mary Gardiner.

The video from my sVirt (MAC security for Linux virtualization) talk is available as an OGG file. I've also re-uploaded it as a google video.

I'd suggest having a copy of the slides open when watching, as they're not always shown in the video, and you're ( Read more... )

The slides from my LCA talk on sVirt talk may be found here in PDF format.

The talk seemed to go reasonably well, and had a larger audience than I expected given that Tridge and Willy were talking at the same time. A video of the talk should appear online soon.

I'm preparing to travel to Hobart for LCA next week, which will be a refreshing break from the 40° heat in Sydney, and from conference jet lag-this will my first same-timezone conference in a couple of years, and the closest I've ever been to Antarctica.

I'll be giving a talk on sVirt, a project to harden Linux-based virtualization with MAC ( Read more... )

Version 2.6.28 of the Linux kernel was released during Christmas, so I thought it'd be worthwhile waiting until after typical vacation days to post a summary of changes to the security subsystem. As always, thanks to the Kernel Newbies folk who track major kernel changes.

• Dummy SELinux policy support
  Serge Hallyn added a dummy policy for SELinux ( Read more... )