[chiglug] Linux Foundation admins - Suggested workstation security

[sten]

All the more reason to stick with SELinux. It's not nearly as hard as it
used to be. There's a good primer here:  https://youtu.be/cNoVgDqqJmM
On Sep 3, 2015 11:13 AM, "Kevin Brandstatter" <icarusthecow at gmail.com>
wrote:

> Now I'm not a lawyer (though I've spent far more time reading software
> licenses than I would like), but if what I'm reading is correct, they are
> ceasing the publications of patches (source code) for code derived from the
> linux kernel (kernel patches), which is licensed under the GPL, which last
> I checked required the licensing of the the derivative work (the patches)
> also be licensed as GPL. Though it sounds like it would be the redhat
> approach "we only give our source to our customers" but then those
> customers should be free to redistribute those patches without restriction
> (though apparently redhat service terms require that you don't allowing
> them to terminate the service)
> Legal ambiguity aside (basically the GPL copyleft prevents them from
> restricting redistribution of the patches), this sounds like a temper
> tantrum reaction from a group that doesn't feel supported by the community,
> and doesn't really help anyone. Kinda sad really, I expect this from
> Oracle, but not from an traditionally open source company.
>
> -Kevin
>
> On Wed, Sep 2, 2015 at 11:43 PM, Lincoln Bryant <lincolnb at uchicago.edu>
> wrote:
>
>> On 9/2/2015 10:15 PM, Jim Campbell wrote:
>>
>>> Hi All,
>>>
>>> I saw this, and thought I would pass it along - partly for the practical
>>> benefit of providing laptop security guidelines (workstations still
>>> matter!), but for the sake of discussion, too.
>>>
>>> https://github.com/lfit/itpol/blob/master/linux-workstation-security.md
>>>
>>> Is there anything that you do that isn't included?  Are there any things
>>> that they suggest that you don't do (yet)?  I haven't set a bios
>>> password on my laptop, but I suppose I should get around to that. I do
>>> use SELinux, but haven't heard much about GRSecurity.
>>>
>>> Jim
>>>
>>> _______________________________________________
>>> discuss mailing list
>>> discuss at lists.chicagolug.org
>>> https://lists.chicagolug.org/mailman/listinfo/discuss
>>>
>>>
>> grsecurity will no longer release their patches publicly :(
>>
>> https://grsecurity.net/announce.php
>>
>> -L
>>
>>
>> _______________________________________________
>> discuss mailing list
>> discuss at lists.chicagolug.org
>> https://lists.chicagolug.org/mailman/listinfo/discuss
>>
>
>
> _______________________________________________
> discuss mailing list
> discuss at lists.chicagolug.org
> https://lists.chicagolug.org/mailman/listinfo/discuss
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.chicagolug.org/pipermail/discuss/attachments/20150904/31fe61c0/attachment-0002.html>