veyepar: Namespacing in SELinux

Hi user

Admin Login:

Name: Namespacing in SELinux
--client lca --show lca2018 --room greathall 13623 --force
Next: 14 The design and implementation of the XArray

show more... Marks

Author(s):	James Morris
Location	Great Hall CB01.05.009
Date	jan Mon 22	Days Raw Files
Start	14:05	First Raw Start	13:51
Duration	0:25:0	Offset	0:13:10
End	14:30	Last Raw End	14:51
Chapters	00:00 0:13:27
Total cuts_time	25 min.

http://lca2018.linux.org.au/schedule/presentation/160/
raw-playlist raw-mp4-playlist encoded-files-playlist host archive public tweet mp4 svg png

final audio

assets release.pdf Namespacing_in_SELinux.json
logs
Admin: episode episode list cut list raw files day marks day marks day image_files

State:

Locked:

clear this to unlock

Locked by:

user/process that locked.

Start:

initially scheduled time from master, adjusted to match reality

Duration:

length in hh:mm:ss

Name:

Video Title (shows in video search results)

Emails:

email(s) of the presenter(s)

Released:

has someone authorised pubication

Normalise:

Channelcopy:

m=mono, 01=copy left to right, 10=right to left, 00=ignore.

Thumbnail:

filename.png

Description:

markdown

Linux kernel namespaces provide isolated views of kernel resources, such as networking, IPC, and filesystem mounts.  Combined with cgroups, namespaces form the basis of Linux containers, a form of lightweight virtualization which shares a single kernel image.

While namespacing support has been implemented for several key kernel resources, security components of the kernel such as LSMs (Linux Security Modules) currently lack namespacing support.  This presents many challenges for those wishing to deploy full-system containers, which appear to the user to be operating system instances, but which are in fact subject to global security mechanisms and policies.

In this talk, I'll discuss the work in progress to extend Linux kernel namespacing support to SELinux, to allow full-system containers to load their own individual security policies into an virtualized instance of the SELinux kernel mechanism.  This work is based on prototype patches posted by the NSA a few months ago,  which I've been extending to cover file labeling support as one of several current TODO items.

We'll discuss how the core SELinux components have been virtualized, the namespacing of xattr-based inode security labels, and future challenges for this project.

Comment:

production notes

recording sheet

recording sheet

2018-01-22/13_51_50.ts Apply: 13:51:50 - 14:06:56 ( 00:15:06 ) S: 13:51:50 - E: 14:21:49 D: 00:29:59 (End: 906.0) show more...

vlc ~/Videos/veyepar/lca/lca2018/dv/greathall/2018-01-22/13_51_50.ts :start-time=00.0 --audio-desync=0

	Raw File	Cut List
	13:51:50		seconds: 0.0 Wall: 13:51:50
Duration	00:29:59
	14:21:49		seconds: 906.0 Wall: 14:06:56
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2018-01-22/13_51_50.ts Apply: 14:06:56 - 14:07:12 ( 00:00:16 ) S: 13:51:50 - E: 14:21:49 D: 00:29:59 (Start: 906.0) (End: 922.0) show more...

vlc ~/Videos/veyepar/lca/lca2018/dv/greathall/2018-01-22/13_51_50.ts :start-time=0906.0 --audio-desync=0

	Raw File	Cut List
	13:51:50		seconds: 906.0 Wall: 14:06:56
Duration	00:29:59
	14:21:49		seconds: 922.0 Wall: 14:07:12
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2018-01-22/13_51_50.ts Apply: 14:07:12 - 14:08:22 ( 00:01:10 ) S: 13:51:50 - E: 14:21:49 D: 00:29:59 (Start: 922.0) (End: 992.0) show more...

vlc ~/Videos/veyepar/lca/lca2018/dv/greathall/2018-01-22/13_51_50.ts :start-time=0922.0 --audio-desync=0

	Raw File	Cut List
	13:51:50		seconds: 922.0 Wall: 14:07:12
Duration	00:29:59
	14:21:49		seconds: 992.0 Wall: 14:08:22
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2018-01-22/13_51_50.ts Apply: 14:08:22 - 14:21:49 ( 00:13:27 ) S: 13:51:50 - E: 14:21:49 D: 00:29:59 (Start: 992.0) show more...

vlc ~/Videos/veyepar/lca/lca2018/dv/greathall/2018-01-22/13_51_50.ts :start-time=0992.0 --audio-desync=0

	Raw File	Cut List
	13:51:50		seconds: 992.0 Wall: 14:08:22
Duration	00:29:59
	14:21:49		seconds: 0.0 Wall: 13:51:50
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2018-01-22/14_21_50.ts Apply: 14:21:50 - 14:33:54 ( 00:12:04 ) S: 14:21:50 - E: 14:51:50 D: 00:30:00 (End: 724.0) show more...

vlc ~/Videos/veyepar/lca/lca2018/dv/greathall/2018-01-22/14_21_50.ts :start-time=00.0 --audio-desync=0

	Raw File	Cut List
	14:21:50		seconds: 0.0 Wall: 14:21:50
Duration	00:30:00
	14:51:50		seconds: 724.0 Wall: 14:33:54
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2018-01-22/14_21_50.ts Apply: 14:33:54 - 14:35:48 ( 00:01:54 ) S: 14:21:50 - E: 14:51:50 D: 00:30:00 (Start: 724.0) (End: 838.0) show more...

vlc ~/Videos/veyepar/lca/lca2018/dv/greathall/2018-01-22/14_21_50.ts :start-time=0724.0 --audio-desync=0

	Raw File	Cut List
	14:21:50		seconds: 724.0 Wall: 14:33:54
Duration	00:30:00
	14:51:50		seconds: 838.0 Wall: 14:35:48
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2018-01-22/14_21_50.ts Apply: 14:35:48 - 14:51:50 ( 00:16:02 ) S: 14:21:50 - E: 14:51:50 D: 00:30:00 (Start: 838.0) show more...

vlc ~/Videos/veyepar/lca/lca2018/dv/greathall/2018-01-22/14_21_50.ts :start-time=0838.0 --audio-desync=0

	Raw File	Cut List
	14:21:50		seconds: 838.0 Wall: 14:35:48
Duration	00:30:00
	14:51:50		seconds: 0.0 Wall: 14:21:50
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

Rf filename:

root is .../show/dv/location/, example: 2013-03-13/13:13:30.dv

Sequence:

get this:

check and save to add this

2018-01-22/13_51_50.ts
audio viz

audio viz

2018-01-22/14_21_50.ts
audio viz

audio viz

Veyepar Video Eyeball Processor and Review