<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 10">
<meta name=Originator content="Microsoft Word 10">
<link rel=File-List href="cid:filelist.xml@01C598E0.3DD4A710">
<title>Re: Any interest in an SELinux presentation? </title>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PersonName" downloadurl="http://www.microsoft.com"/>
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:1627421319 -2147483648 8 0 66047 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;
text-underline:single;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Courier New";
mso-fareast-font-family:"Times New Roman";}
p
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
span.EmailStyle18
{mso-style-type:personal-reply;
mso-style-noshow:yes;
mso-ansi-font-size:10.0pt;
mso-bidi-font-size:10.0pt;
font-family:Arial;
mso-ascii-font-family:Arial;
mso-hansi-font-family:Arial;
mso-bidi-font-family:Arial;
color:navy;}
span.SpellE
{mso-style-name:"";
mso-spl-e:yes;}
span.GramE
{mso-style-name:"";
mso-gram-e:yes;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";}
</style>
<![endif]-->
</head>
<body lang=EN-US link=blue vlink=blue style='tab-interval:.5in'>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><!-- Converted from text/plain format -->Josh,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>I'd like to hear about how <span
class=SpellE>SELinux</span> can be configured to pass the government NISPOM
chapter 8 auditing policy requirements; specifically DSS C2 PL-1 audits for
systems where ALL users have formal access approval and ALL users have the "need-to-know."<span
style='mso-spacerun:yes'> </span>By the way, to folks on this list who
don't know the jargon, the DSS is the Defense Security Service and their
website is (<a href="http://www.dss.mil/">http://www.dss.mil</a>). CA stands
for Controlled Access Protection see (<a
href="http://csrc.ncsl.nist.gov/secpubs/rainbow/std001.txt">http://csrc.ncsl.nist.gov/secpubs/rainbow/std001.txt</a>)
and PL-1 stands for Protection Level 1 and it is the easiest of the 4 levels to
pass...however it is by no means easy to pass.<span
style='mso-spacerun:yes'> </span>Chapter 8 of the NISPOM can be seen here
(<a href="http://www.dss.mil/isec/change_ch8.htm">http://www.dss.mil/isec/change_ch8.htm</a>).
<span style='mso-spacerun:yes'> </span>I have been using a product called Snare
for Linux (<a href="http://www.intersectalliance.com/projects/Snare/">http://www.intersectalliance.com/projects/Snare/</a>)
to pass these audits.<span style='mso-spacerun:yes'> </span><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>In regards to the time-frame, I'd
rather have Josh do the Sept. presentation (since I will most likely not be
able to make the October one due to a new member of my family arriving at that
time).<span style='mso-spacerun:yes'> </span>Not that I wouldn't LOVE
to hear Ram <span class=SpellE>Rao</span> speak again, but I am somewhat
involved in Linux Security at Rolls-Royce and I really-really-really want to
hear about the <span class=SpellE>SELinux</span> stuff.<o:p></o:p></span></font></p>
<div>
<p><font size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:
Arial;color:navy;mso-no-proof:yes'>Regards,</span></font><font color=navy><span
style='color:navy;mso-no-proof:yes'> <o:p></o:p></span></font></p>
<p><b><font size=2 color=navy face=Arial><span style='font-size:10.0pt;
font-family:Arial;color:navy;font-weight:bold;mso-no-proof:yes'>David (Doc)
Brown</span></font></b><font color=navy><span style='color:navy;mso-no-proof:
yes'> <br>
</span></font><font size=2 color=navy face=Arial><span style='font-size:10.0pt;
font-family:Arial;color:navy;mso-no-proof:yes'>Rolls-Royce, Mail Stop W2C</span></font><font
color=navy><span style='color:navy;mso-no-proof:yes'> <br>
</span></font><font size=2 color=navy face=Arial><span style='font-size:10.0pt;
font-family:Arial;color:navy;mso-no-proof:yes'>2001 S. Tibbs Ave.</span></font><font
color=navy><span style='color:navy;mso-no-proof:yes'> <br>
</span></font><font size=2 color=navy face=Arial><span style='font-size:10.0pt;
font-family:Arial;color:navy;mso-no-proof:yes'>Indianapolis, IN 46241</span></font><font
color=navy><span style='color:navy;mso-no-proof:yes'> <br>
</span></font><b><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy;font-weight:bold;mso-no-proof:yes'>317.230.3623</span></font></b><font
size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:Arial;
color:navy;mso-no-proof:yes'> - Voice</span></font><font color=navy><span
style='color:navy;mso-no-proof:yes'> <br>
</span></font><b><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy;font-weight:bold;mso-no-proof:yes'>317.235.3883</span></font></b><font
size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:Arial;
color:navy;mso-no-proof:yes'> - Pager</span></font><font color=navy><span
style='color:navy;mso-no-proof:yes'> <br>
<a href="mailto:doc.brown@eds.com"><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>doc.brown@eds.com</span></font></a> <br>
<a href="mailto:doc.brown@rolls-royce.com"><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>doc.brown@rolls-royce.com</span></font></a>
</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal style='margin-left:.5in'><font size=2 face=Tahoma><span
style='font-size:10.0pt;font-family:Tahoma'>-----Original Message-----<br>
<b><span style='font-weight:bold'>From:</span></b>
cinlug-bounces@lists.cinlug.org [mailto:cinlug-bounces@lists.cinlug.org] <b><span
style='font-weight:bold'>On Behalf Of </span></b></span></font><st1:PersonName><font
size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>Josh
Bressers</span></font></st1:PersonName><font size=2 face=Tahoma><span
style='font-size:10.0pt;font-family:Tahoma'><br>
<b><span style='font-weight:bold'>Sent:</span></b> Thursday, August 04, 2005
9:47 AM<br>
<b><span style='font-weight:bold'>To:</span></b> </span></font><st1:PersonName><font
size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>Brown,
David</span></font></st1:PersonName><font size=2 face=Tahoma><span
style='font-size:10.0pt;font-family:Tahoma'> (Test Department)<br>
<b><span style='font-weight:bold'>Subject:</span></b> Re: Any interest in <span
class=GramE>an</span> SELinux presentation? </span></font></p>
<p class=MsoNormal style='margin-left:.5in'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p style='margin-left:.5in'><font size=2 face="Times New Roman"><span
style='font-size:10.0pt'>> If there's interest, I'd be willing to give a
talk on SELinux.<br>
><br>
> For those of you who don't know what SELinux is, here's a few links:<br>
><br>
> <a href="http://www.nsa.gov/selinux/">http://www.nsa.gov/selinux/</a><br>
> <a href="http://www.crypt.gen.nz/selinux/faq.html">http://www.crypt.gen.nz/selinux/faq.html</a><br>
<br>
Well, it seems September is free at this point, so if there are no<br>
complaints, I'd love to be the presenter.<br>
<br>
Now for the important bits, what does everyone want to hear about? There<br>
are a number of new security related technologies springing up in various<br>
things Linux, SELinux being the most popular. Currently I plan to focus
on<br>
a very high level overview of SELinux, probably with a few mentions of<br>
things like ExecShield and some of new glibc/gcc enhancements.<br>
<br>
As for a little background for those of you wondering "Who is this person<br>
and why should I waste my precious TV time to listen to him?"<br>
<br>
I live in the Indianapolis area and work on the Security Response Team for<br>
Red Hat (you may have heard of them). My job is to basically find and<br>
verify all the things we fix in our security errata.<br>
<br>
Thanks.<br>
<br>
--<br>
JB</span></font><o:p></o:p></p>
</div>
</body>
</html>
<P><FONT SIZE=2 FACE="Arial">This email message and any attachments are for the sole use of the intended recipients and may contain proprietary and/or confidential information which may be privileged or otherwise protected from disclosure. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipients, please contact the sender by reply email and destroy the original message and any copies of the message as well as any attachments to the original message.</FONT></P>