Version 0.1
Vortrag: Security & Sandboxing with systemd
In a post-Snowden world IT security is of high importance, in particular for network-facing system services. In this talk we'll discuss how systemd can help you locking down your services, in a straight-forward and effective way. We'll discuss a variety of security knobs you may make use for your services, including ways to minimize privileges, reduce the attack surface and run services with immutable file systems. We'll discuss how these service-level security features relate to other Linux security technology and where further development will hopefully get us.
In a post-Snowden world IT security is of high importance, in particular for network-facing system services. In this talk we'll discuss how systemd can help you locking down your services, in a straight-forward and effective way. We'll discuss a variety of security knobs you may make use for your services, including ways to minimize privileges, reduce the attack surface and run services with immutable file systems. We'll discuss how these service-level security features relate to other Linux security technology and where further development will hopefully get us.
This presentation will be technical, intended for administrators and developers.
Relevant keywords are: systemd, security, service management, sandboxing.
Info
Tag:
29.04.2017
Anfang:
14:00 Uhr
Dauer:
00:45
Room:
G.AP147.005
Track:
Admin
Sprache:
en
Links:
Feedback
Uns interessiert deine Meinung! Wie fandest du diese Veranstaltung?
Concurrent events
- G.AP147.006
- Raspberry Pi USB OTG Gadget und andere Projekte
- G.AP149.116
- PostgreSQL: Automatisches Failover und Clustering
- G.AP147.004
- Urheberrecht
- G.AP149.112
- LPI Prüfungen
Referenten
Lennart Poettering |