Collaborate Disseminate
I have a Rust-app which uses PyO3 to execute arbitrary Python code. The Python code should only be able to do basic math operations and in now way should be able to access the network (except UnixSockets) or have access to files except a f… Continue reading AppArmor deny all files except specifics
I have a Rust-app which uses PyO3 to execute arbitrary Python code. The Python code should only be able to do basic math operations and in now way should be able to access the network (except UnixSockets) or have access to files except a f… Continue reading AppArmor deny all files except specifics
Back in 2006 Slashdot reported on a 50-megabyte “micro” distro called Damn Small Linux. (And in 2012 we wrote that it “rose from the dead” with a new release candidate.)
Now Damn Small Linux has been reborn again, according to its developer’s web sit… Continue reading ‘Damn Small Linux’ is Back – But Bigger
Following the advice in my previous question here I currently have a Rust-binary that gets executed by my main-app using std::process::Command.
The executed binary first gets validated by a hash.
The main-app should not have any limitation… Continue reading Add child-process to cgroup?
I was under the impression that an antivirus for Linux makes sense only for installing in business computers. Checking Norton/BitDefender/Karpesky I don’t see any Linux option for the first or any non business specific solution for the oth… Continue reading Is an antivirus needed for linux home usage when there is exchange of files with other OS e.g. Windows?
Linux has a shim problem. Which naturally leads to a reasonable question: What’s a shim, and why do we need it? The answer: Making Linux work wit Secure Boot, and …read more Continue reading This Week in Security: Broken Shims, LassPass, and Toothbrushes?
A critical remote code execution vulnerability in Shim could allow attackers to take over vulnerable Linux systems.
The post Most Linux Systems Exposed to Complete Compromise via Shim Vulnerability appeared first on SecurityWeek.
Continue reading Most Linux Systems Exposed to Complete Compromise via Shim Vulnerability
The FritzFrog cryptomining botnet has new potential for growth: a recently analyzed variant of the bot is exploiting the Log4Shell (CVE-2021-44228) and PwnKit (CVE-2021-4034) vulnerabilities for lateral movement and privilege escalation. The FritzFrog … Continue reading FritzFrog botnet exploits Log4Shell, PwnKit vulnerabilities
I am writing to express my deep concern about potential widespread vulnerabilities affecting multiple Linux distributions. While my findings are based on personal experiences and require further verification, I urge the security community … Continue reading Urgent Investigation Needed: Potential Widespread Tampering Linux Distributions Across Diverse Variants [closed]
Researchers at Qualys call attention to a vulnerability in Linux’s GNU C Library (glibc) that allows full root access to a system.
The post GNU C Library Vulnerability Leads to Full Root Access appeared first on SecurityWeek.
Continue reading GNU C Library Vulnerability Leads to Full Root Access