security [ARCHIVED]

security@lists.fedoraproject.org

840 discussions

[Fedocal] Reminder meeting : Kubernetes hack session
by jasoncallaway＠fedoraproject.org 02 Apr '18

02 Apr '18

Dear all, You are kindly invited to the meeting: Kubernetes hack session on 2018-04-04 from 10:00:00 to 16:00:00 US/Eastern At https://meet.google.com/adc-xwet-wir The meeting will be about: Join the Fedora Red Team at https://meet.google.com/adc-xwet-wir for a hack / learning session on Kubernetes security topics Source: https://apps.fedoraproject.org/calendar/meeting/8777/

1 0

starting smb results in AVC denial send_msg to avahi
by Chris Murphy 18 Dec '17

18 Dec '17

I don't understand the consequence for this AVC denial, things seem to be working correctly but maybe I'm not using some feature that is affected by the denial. Anyway, whenever I start samba, I see an AVC denial in the log. Should I file a bug and if so against what component? Dec 17 18:08:37 f27s.localdomain systemd[1]: Mounting /srv/scratch... Dec 17 18:08:37 f27s.localdomain systemd[1]: Mounted /srv/scratch. Dec 17 18:08:43 f27s.localdomain sudo[1543]: chris : TTY=pts/0 ; PWD=/home/chris ; USER=root ; COMMAND=/bin/systemctl start smb Dec 17 18:08:43 f27s.localdomain audit[1543]: USER_CMD pid=1543 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/chris" cm d=73797374656D63746C20737461727420736D62 terminal=pts/0 res=success' Dec 17 18:08:43 f27s.localdomain audit[1543]: CRED_REFR pid=1543 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantor s=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Dec 17 18:08:43 f27s.localdomain sudo[1543]: pam_systemd(sudo:session): Cannot create session: Already running in a session Dec 17 18:08:43 f27s.localdomain audit[1543]: USER_START pid=1543 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open g rantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Dec 17 18:08:43 f27s.localdomain sudo[1543]: pam_unix(sudo:session): session opened for user root by chris(uid=0) Dec 17 18:08:43 f27s.localdomain systemd[1]: Starting Samba SMB Daemon... Dec 17 18:08:43 f27s.localdomain systemd[1]: smb.service: Supervising process 1548 which is not our child. We'll most likely not notice when it exits. Dec 17 18:08:43 f27s.localdomain smbd[1548]: [2017/12/17 18:08:43.907938, 0] ../lib/util/become_daemon.c:124(daemon_ready) Dec 17 18:08:43 f27s.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=smb comm="systemd" exe="/usr/l ib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 17 18:08:43 f27s.localdomain smbd[1548]: STATUS=daemon 'smbd' finished starting up and ready to serve connections Dec 17 18:08:43 f27s.localdomain audit[1543]: USER_END pid=1543 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close gr antors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Dec 17 18:08:43 f27s.localdomain audit[1543]: CRED_DISP pid=1543 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantor s=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Dec 17 18:08:43 f27s.localdomain systemd[1]: Started Samba SMB Daemon. Dec 17 18:08:43 f27s.localdomain sudo[1543]: pam_unix(sudo:session): session closed for user root Dec 17 18:08:43 f27s.localdomain audit[665]: USER_AVC pid=665 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.DBus.Peer member=Ping dest=org.freedesktop.Avahi spid=1548 tpid=646 scontext=system_u:system_r:smbd_t:s0 tconte xt=system_u:system_r:avahi_t:s0 tclass=dbus permissive=0 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' Dec 17 18:08:51 f27s.localdomain sudo[1553]: chris : TTY=pts/0 ; PWD=/home/chris ; USER=root ; COMMAND=/bin/smbstatus -- Chris Murphy

1 0

No Fedora Red Team meeting tomorrow
by Jason Callaway 30 Nov '17

30 Nov '17

Team, I have to reschedule our monthly Fedora Red Team meeting that would normally take place tomorrow. I'll hit up this list when I have another time slot identified. Thanks, ~Jason -- jasoncallaway(a)fedoraproject.org | +12402859529 | https://keybase.io/jasoncallaway

1 0

Red Container on Github
by Jeremy Young 15 Nov '17

15 Nov '17

Hello Fedora Red Team, I've opened a couple of PRs to address some of the points laid out on your wiki page as goals for the initial implementation of Red Container: https://fedoraproject.org/wiki/SIGs/Red_Team I've not seen any activity in the repo since it was created. Is this something that's actively being worked on? If so can I solicit input on the work?

3 3

[Fedocal] Reminder meeting : BSides Delaware
by jasoncallaway＠fedoraproject.org 07 Nov '17

07 Nov '17

Dear all, You are kindly invited to the meeting: BSides Delaware on 2017-11-10 from 00:00:00 to 00:00:00 UTC At Delaware Technical Community College 400 Stanton-Christiana Road Newark, Delaware 19713 The meeting will be about: Join the Fedora Red Team at BSides Delaware [0]. Swing by our table for some swag, hear about our active projects ELEM [1] and CTL [2], or generally geek it up about infosec! [0] - http://www.bsidesdelaware.com [1] - https://github.com/fedoraredteam/elem [2] - https://github.com/fedoraredteam/cyber-test-lab Source: https://apps.fedoraproject.org/calendar/meeting/8640/

1 0

[Fedocal] Reminder meeting : FRT monthly team meeting
by jasoncallaway＠fedoraproject.org 01 Nov '17

01 Nov '17

Dear all, You are kindly invited to the meeting: FRT monthly team meeting on 2017-11-03 from 14:00:00 to 15:00:00 UTC At fedora-security(a)chat.freenode.net The meeting will be about: Join us for our monthly team meeting on Freenode IRC #fedora-security More information available at: [https://fedoraproject.org/wiki/Fedora_Red_Team_meeting_3_November_2017](htt… Source: https://apps.fedoraproject.org/calendar/meeting/6953/

1 0

[Fedocal] Reminder meeting : FCTL Development Sprint
by jasoncallaway＠fedoraproject.org 11 Oct '17

11 Oct '17

Dear all, You are kindly invited to the meeting: FCTL Development Sprint on 2017-10-12 from 09:00:00 to 16:00:00 US/Eastern At https://hangouts.google.com/hangouts/_/jasoncallaway.com/fctl-dev-sprint The meeting will be about: Join us for a development sprint for the Fedora Cyber Test Lab. It's most of the day in the US/Eastern timezone, so drop by for all or it, or just to say hi. See the following for more information: https://blog.jasoncallaway.com/tag/fedora-cyber-test-lab/ More information available at: [https://github.com/fedoraredteam/cyber-test-lab](https://github.com/fedorar… Source: https://apps.fedoraproject.org/calendar/meeting/6956/

1 0

Red Team SIG calendar
by Jason Callaway 08 Oct '17

08 Oct '17

For anybody who wants to keep track of our Red Team shenanigans, we now have a Fedocal at https://apps.fedoraproject.org/calendar/red-team/. You can get an iCal export here: https://apps.fedoraproject.org/calendar/ical/red-team/ ~Jason <https://apps.fedoraproject.org/calendar/ical/red-team/> <https://apps.fedoraproject.org/calendar/ical/red-team/> <https://apps.fedoraproject.org/calendar/ical/red-team/> <https://apps.fedoraproject.org/calendar/ical/red-team/> <https://apps.fedoraproject.org/calendar/ical/red-team/> <https://apps.fedoraproject.org/calendar/ical/red-team/>

1 0

Fedora Red Team meeting tomorrow
by Jason Callaway 05 Oct '17

05 Oct '17

Just wanted to remind everybody that the Fedora Red Team will be having our monthly team meeting tomorrow on IRC at 1400 UTC (10am US/Eastern). #fedora-security, SIG page at https://fedoraproject.org/wiki/SIGs/Red_Team. Hope to see you there! ~Jason -- Jason Callaway | jcallaway(a)redhat.com | (240) 285-9529 | GPG Key 0x81ED4A9A

1 0

Meetup at BruCon this week?
by Till Maas 03 Oct '17

03 Oct '17

Hi, I will be at BruCon[0] in Ghent, Belgium this week. Is there anyone from this list going, too? It would be nice to meet. Kind regards Till [0] https://2017.brucon.org/

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

security [ARCHIVED]