Sub-system Update: Smack Update 2018
summary
Smack is shipping in recent Samsung TVs, Tizen devices and automotive distributions including Toyota and integrates with Yocto builds; this year it gains overlayfs support and a fix allowing privileged processes to change keys. Developers find about four or five memory leaks and intermittent breakage during release candidates, so an automated test suite is now in progress. Missing work items include Calypso support, netlabel cleanup, namespacing, InfiniBand/libvirt/eBPF integration, and a Fedora rule set plus templates for Ubuntu, Debian and SUSE.
AI-written summary · about
chapters (7)
- 0:00LINUX SECURITY SUMMIT
- 0:10Who's using Smack?
- 1:39What's new in Smack?
- 2:23What's fixed in Smack?
- 4:22Networking projects Calipso
- 5:58Other projects Smack namespace
- 6:39Rule set for distributions
related talks
10mSmack in 2016
06mSubsystem Update: The 2019 Smack Update
22mOverview and Recent Developments: Smack
01h 14mLSM Updates: IMA, SELinux, AppArmor, SMACK &...
45mFinally, a Smack Reference Policy
26mSecurity WG Lightning talks
15mSubsystem Update: LSM Stacking - What You Can Do Now and What's Next
07mSubsystem Update: AppArmor Update 2019