linux encrypting security

This blog article concerns linux encrypting security with public/private key (gpg, RSA, ...) mechanism and X509 certificates hierarchical security.

 

Levels of linux security  

 

UEFI Secure boot

wiki.debian.org/SecureBoot

HexNode: What is UEFI Secure Boot?

NSA: Managing UEFI Secure Boot

Encrypted filesystem 

Linux Unified Key Setup 

Full Disk Encryption on Linux with LUKS

  

 https://www.linux.com/training-tutorials/how-encrypt-linux-file-system-dm-crypt/ 

filesystem mounting options: fstab

security options: readonly nonexecutable nosuid nosgid 

ro=recursive,noexec=recursive,nosuid  

mount -o remount=noexec=recursive,nosuid  /mnt/{mountpoint}

# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; See fstab(5).
#
# <file system> <mount point>   <type>  <options>  <dump>  <pass>
# / was on /dev/sda4 during installation
UUID=07ceda95-80a7-486c-930b-e9facdf1c073 /        ext4    errors=remount-ro 0       1
# /boot was on /dev/sda2 during installation
UUID=58570ac7-0698-4755-81b7-cc6d59e09f60 /boot    ext4    defaults          0       2
# /boot/efi was on /dev/sda1 during installation
UUID=8B4E-B934  /boot/efi       vfat    umask=0077      0       1
/dev/mapper/sda3_crypt /home           ext4    discard,commit=30,noexec=recursive,nosuid,errors=remount-ro         0       2

snapcraft.io

configure snaps  

using verifiable and updateable readonly snapshots,
instead of installing packages / binaries under /usr

mounting snapshots loopback squashfs (ro,nodev,relatime,errors=continue,threads=single)

                                                                                       

Signing containers, kernel images, packages,repositories

https://www.qcecuring.com/blog/code-signing-linux-guide

Signed executables under linux (unix)

 

https://stackoverflow.com/questions/1732927/signed-executables-under-linux 

Since Solaris 10 & 11 OS perspective all binaries were signed:

https://sourceforge.net/projects/signelf/ 

Linux kernel sign-file.c 

https://github.com/torvalds/linux/scripts/sign-file.c

 

Signed interpreter scripts under linux

TODO ;(

 

Verify signed executables at kernel level

TODO ;(

Verify / Validate instruction at hardware level

 

fetch, add, load, move, jump 

TODO ;(

C# JetBrains Rider on Ubuntu Linux Wayland X11.

I tried JetBrains Rider on Ubuntu Linux Wayland X11.

 

Console Application

 

It's easy to publish a console application.
You must install in any way this Nuget package:
https://www.nuget.org/packages/System.Runtime.Extensions 

You might install additional Nuget packages, when using Resources.resx files and System.Drawing.Bitmap:
https://www.nuget.org/packages/System.Resources.Extensions
https://www.nuget.org/packages/System.Drawing.Common 

 You can publish the application native x64 linux with that settings

 

or portable framework dependent. 

 

Asp.Net Blazor Application

 

But you can also build, publish, and launch an Asp.Net Blazor application. This animation shows you how to:     

 

Market competition - where it's useful and where it's definitely not

Market competition among mobile network providers

There are several mobile network operators in the Austrian market. 

In the past (before year 2000), the market was mainly dominated by Mobilkom, 
a subsidiary of Telekom Austria, which was itself a subsidiary of Austrian Post. 

When we look at the market shares of mobile network operators, some only see the job cuts at the former Mobilkom. However, nobody calculates the number of new jobs created by the competition or considers whether there are now more jobs overall for mobile network operators in the Austrian market than during the near-monopoly era.

 

precarious jobs 

There are always people, including rarely some german economists, who call for more competition in the precarious job sector. 

Simple moving companies with small trucks charge at least €38-€50 per hour and don't work for less than an hour. You can only book them for one hour or more.

Distributing printed advertising flyers costs €0.11 per piece at the post office.
Private distribution agencies in Vienna often charge between €39 and €60 per 1,000 pieces for distribution alone. It's nearly impossible to find a reputable offer below that price. Lowering prices in the precarious segment risks poor or no service at all. (Some advertising leaflets end up in the trash and there is no legal company at all behind it.)

Trying to cut prices in the lowest price segment almost never works; there, the key is to offer better guaranteed performance and quality. Customers in the lowest price segment are almost always interested in guaranteed performance and quality, and rarely in a price reduction of 0.01 cents. 

Prices that are too low often cause customers to fear that the required service will actually be provided or not.