Using RHEL built in Security Technologies daily
summary
Shows concrete configs and working demos: uses sudo to enforce a one‑minute time window and capture commands with sudo session replay, uses usbguard CLI to list devices, run usbguard allow-device by ID and generate /etc/usbguard/rules.conf, uses fapolicyd with a trustdb and hash or IMA integrity checks to allow only RPM‑trusted or admin‑approved binaries, and uses Ansible roles to deploy tang and clevis for PBD/NBD so encrypted disks unlock after reboot; demos complete successfully end to end.
AI-written summary · about
chapters (10)
- 0:00Start
- 6:09log the session
- 7:17run interactive session as a user test
- 8:45replay the session
- 9:54usb device authorization
- 26:19set up nvd at scale with the help of ansible
- 28:15specify a set of hosts
- 29:05creating a new set of keys
- 30:24specify an encrypted device
- 31:10running a vm with encrypted volumes
related talks
03h 27mEnterprise Linux Security Technologies Lab
22mSecurity Showdown: The Overconfident Operator Vs the Nefarious...
43mBuilding Trust Through Proactive Security - Key Parts of the Trus...
45mUsing Linux Securely in the Cloud
47mMinimum Viable Linux
30mTales of Red Teaming
26mContainers: Your Ally in Improving Security
13mFreedom of Security