Security - Revision history

Wmat: Added the ELC2013 Contest section

2013-02-13T17:59:35Z

Added the ELC2013 Contest section

Peter Huewe: added link

2011-10-28T10:46:07Z

added link

Howard-d: /* Security Articles */

2011-04-12T00:06:37Z

‎Security Articles

Wmat: Fixed URL to bsign and ELFsign

2011-03-11T20:08:50Z

Fixed URL to bsign and ELFsign

Wmat: Fixed URL to SecuritySpec

2011-03-11T20:00:51Z

Fixed URL to SecuritySpec

Wmat: /* Tomoyo */

2011-03-11T19:55:42Z

‎Tomoyo

Wmat: /* Tomoyo */

2011-03-11T19:55:19Z

‎Tomoyo

Wmat: Moving external links to internal links and removed redundant link to celinuxforum wiki.

2011-03-11T19:55:06Z

Moving external links to internal links and removed redundant link to celinuxforum wiki.

Wmat: Replaced external links with internal links and uploaded Nakamura OLS 2008 paper.

2011-03-11T19:49:59Z

Replaced external links with internal links and uploaded Nakamura OLS 2008 paper.

Tyler Oderkirk: /* Sample and Opensource code = */ added missing header markup

2010-09-08T15:21:16Z

‎Sample and Opensource code =: added missing header markup

← Older revision		Revision as of 17:59, 13 February 2013
Line 1:		Line 1:
		+	==[[File:Robot64x64.png]] ELC2013 Tech Zone Contest==
		+	<div style="margin:0; margin-top:10px; margin-right:10px; border:1px solid #dfdfdf; padding:0 1em 1em 1em; background-color:#ffffcc; align:right; ">
		+	To add a link to your new page use the following wiki link format:
		+
		+	<nowiki>[[My New Page]]</nowiki>
		+
		+	Save this page/section and your new page link will appear in Red. Click it and begin editing your new page. Remember to conduct all Discussions on the Discussion page associated to every wiki page. The link is at the top, directly above the page title.
		+	</div>
		+	----
		+
		+	==Introduction==
	This page has information about Security technologies for Embedded Linux.		This page has information about Security technologies for Embedded Linux.

@@ Line 109: / Line 109: @@
 *[http://www.trustedbsd.org/mac.html TrustedBSD MAC Framework] - Mandatory access controls extend discretionary access controls by allowing administrators to enforce additional security for all subjects (e.g. processes or sockets) and objects (e.g. sockets, file system objects, sysctl nodes) in the system. Development of those new access control models is facilitated by the development of a flexible kernel access control extension framework, the TrustedBSD MAC Framework. This permits new access control models to be introduced as kernel modules.
-*[https://www.trustedcomputinggroup.org/ Trusted Computing Group (TCG)] - TCG defines a security architecture based on the hardware-based root of trust. This is a cost effective solution to establish Trusted Computing on various platforms. For some introductory information see Seiji Munetoh and Nicholas Szeto's presentation, TCGOverviewPDF, on the [[Tech Conference 2005Docs]] page.  The Trusted Platform Module (TPM) is a security chip bound to the platform and a key component of this architecture. TCG has a Mobile Phone WG which has released a use cases document that is applicable to many generic CE devices in addition to the mobile phone -- [https://www.trustedcomputinggroup.org/groups/mobile/MPWG_Use_Cases.pdf MPWG User Cases]
+*[https://www.trustedcomputinggroup.org/ Trusted Computing Group (TCG)] - TCG defines a security architecture based on the hardware-based root of trust. This is a cost effective solution to establish Trusted Computing on various platforms. For some introductory information see Seiji Munetoh and Nicholas Szeto's presentation, TCGOverviewPDF, on the [[Tech Conference 2005Docs]] page.  The Trusted Platform Module ([[TPM]]) is a security chip bound to the platform and a key component of this architecture. TCG has a Mobile Phone WG which has released a use cases document that is applicable to many generic CE devices in addition to the mobile phone -- [https://www.trustedcomputinggroup.org/groups/mobile/MPWG_Use_Cases.pdf MPWG User Cases]
 === Security Components ===

@@ Line 190: / Line 190: @@
 *[http://www.arm.com/miscPDFs/4136.pdf ARM's Trust Zone for Security]
 *[http://www.research.ibm.com/secure_systems_department/projects/tcglinux/ TPM-based Linux Run-time Attestation]
 ==== Papers ====

@@ Line 86: / Line 86: @@
 *Signed Binaries
 **Dig Sig (part of DSI project at http://disec.sourceforge.net/)
-**Bsign (a Debian project at http://packages.debian.org/unstable/admin/bsign.html)
+**Bsign (a Debian project at http://packages.debian.org/squeeze/bsign)
-**ELFSig (need a reference for this)
+**[http://www.hick.org/code/skape/papers/elfsign.txt ELFSign]
 *Linux API for TCG - pending CELF NPO status and liaison discussions
 *TPE - as a part of LIDS

@@ Line 30: / Line 30: @@
 == Documents ==
-*CELF 1.0 Security Specification: [http://tree.celinuxforum.org/pubwiki/moin.cgi/SecuritySpec_5fR2 Security Spec_R2]
+*CELF 1.0 Security Specification: [http://www.celinuxforum.org/CelfPubWiki/SecuritySpec_R2 Security Spec_R2]
 == Key Requirements and the Related Technologies ==

@@ Line 14: / Line 14: @@
 === Tomoyo ===
 *[[TomoyoLinux|TOMOYO Linux]] is a technology to improve Linux's security originally developed by [http://www.nttdata.co.jp/en/index.html NTT DATA CORPORATION, Japan]. [[TomoyoLinux|TOMOYO Linux]] was released on November, 11, 2005 as an open source software under the GPL. [[TomoyoLinux|TOMOYO Linux]] is a mechanism called Secure OS, which can perform fine grained access control by breaking access permissions into parts like SELinux.
-** [[elc2007-presentation-20070418-for_linux.pdf|ELC2007 presentation]]
+** [[Media:elc2007-presentation-20070418-for_linux.pdf|ELC2007 presentation]]
-** [[ols2007-tomoyo-20070629.pdf|OLS2007 BoF slides]]
+** [[Media:ols2007-tomoyo-20070629.pdf|OLS2007 BoF slides]]
 Tomoyo was incorporated into mainline Linux kernel as of version 2.6.28.

@@ Line 9: / Line 9: @@
 === SELinux ===
 *[[SELinux|SELinux]] - This provides an implementation of the Flask Flux Advanced Security Kernel for Linux. SELinux started as a kernel patch which was presented by the NSA to kernel developers during the 2001 kernel summit. Feeback from this presentation started the LSM project, and the SELinux project helped define large parts of the LSM interface.
-** OLS 2008 paper: [http://ols.fedoraproject.org/OLS/Reprints-2008/nakamura-reprint.pdf SELinux for Consumer Electronics Devices] Nakamura & Sameshima, Hitachi Software Engineering.
+** OLS 2008 paper: [[Media:nakamura-reprint.pdf|SELinux for Consumer Electronics Devices]] Nakamura & Sameshima, Hitachi Software Engineering.
-** ELC 2008 presentation: http://www.celinux.org/elc08_presentations/ELC2008_nakamura.pdf Embedded SELinux]
+** ELC 2008 presentation: [[Media:ELC2008_nakamura.pdf|Embedded SELinux]]
 === Tomoyo ===

@@ Line 197: / Line 197: @@
 * [http://www.embeddedalley.com/pdfs/Smack_for_DigitalTV.pdf SMACK for Digital TV]
-=== Sample and Opensource code ====
+==== Sample and Opensource code ====
 * [http://www.research.ibm.com/gsal/tcpa/ A sample GPL TCPA Linux driver] for Red Hat 8
 * [http://sourceforge.net/projects/tpmdd Linux TPM Device Driver]