It's no secret that Linux is the most popular operating system in the world. It's also no secret that it's a very secure OS, but many things can go wrong. It's hard to keep up with all the patches and vulnerabilities, especially when you must patch tens of thousands of servers without downtime. But Meta has a system for doing so! . Meta's system of patching Linux at hyperscale makes it possible to apply patches to your entire collection of packages at once rather than just one at a time. This means that if someone finds a vulnerability in one package (say, OpenSSH), you can patch all of your packages and be done with it—no need to worry about whether or not any other packages might be affected by this vulnerability because they'll already be patched by the time you install it! This will make life so much easier for sysadmins everywhere, who will now have more time to focus on security issues rather than worrying about whether or not they've applied all their latest patches. I found the article linked below very helpful in understanding Meta's efficient approach to Linux patching, and I thought you would as well. Check it out! . Meta's approach to enhancing Linux on a broad scale streamlines the update implementation process across numerous servers effortlessly.. Linux Patching, Hyperscale Security, Efficient Updates. . Brittany Day
A "sched/fair" change for Linux 5.20 aims to enhance the efficiency when searching for an idle CPU under heavy system load. The change led by Intel should improve the kernel's efficiency when the system is overloaded but as with most low-level tuning does run the risk of regressions. . Intel's Chen Yu worked out this new "SIS_UTIL" scheduler feature to search for an idle CPU based on the sum of the utilization average. This stems from finding that the kernel's select_idle_cpu() is too time consuming when looking for an idle CPU while the system is overloaded. The patch though did already yield a regression within the Stress-NG socket benchmark but is an area for further investigation. There was also a slight regression in at least one Hackbench test configuration. The link for this article located at Phoronix is no longer available. . Intel's latest SIS_UTIL task manager is designed to enhance CPU idle time detection during peak performance conditions. Explore the modifications.. Linux Scheduler, Performance Tuning, Intel SIS_UTIL, Idle CPU Searching. . LinuxSecurity.com Team
Linux giant Red Hat is moving the ball forward on its mission of becoming a key virtualization and cloud infrastructure player. To that end, the company has announced the latest release of its Enterprise Virtualization hypervisor, version 2.2.. With this latest release, Red Hat said it has updated the virtualization platform to include new scalabilities, migration tools, and additional features to expand on performance and security. Version 2.2 also brings Red Hat technology into the world of desktops. With its Red Hat Enterprise Virtualization (RHEV) solution, Red Hat is on a mission to increase scalability and quickly catch up to the competition, which has quite a few more years on the company at this point. With RHEV 2.2, Red Hat has turned up the scalability dial by doubling the number of virtual CPUs that it can support in a single virtual machine from 8 to 16. The addressable amount of memory by a virtual machine has been quadrupled from 64GB to 256GB since the RHEV 2.1 release. The link for this article located at InfoWorld is no longer available. . Explore how Red Hat Enterprise Virtualization 2.2 boosts performance, scalability, and security for your virtualization needs.. Red Hat Enterprise Virtualization,RHEV 2.2,Cloud Infrastructure,Performance Enhancements. . LinuxSecurity.com Team
Until recently, systems and security management have usually been seen as separate disciplines. While large framework vendors paid lip service in marketechture visions of deeply integrated security with the rest of systems and application management, this vision never materialized at a practical ops level.. . .. Until recently, systems and security management have usually been seen as separate disciplines. While large framework vendors paid lip service in marketechture visions of deeply integrated security with the rest of systems and application management, this vision never materialized at a practical ops level. Instead, security and systems management evolved into distinct areas with their own best of breed solutions that involved separate architectures, expertise, and consoles for management. Security focused on analysis while systems management gained prominence in operations. In most cases, security was considered secondary to maintaining performance and availability as companies pursued growth at all costs. New laws and regulations, highly visible worm and virus attacks, and 9/11, however, have transformed security from a back room to a boardroom issue. There are several areas where the convergence of systems and security management can make a big difference in improving efficiency and effectiveness across the enterprise. The link for this article located at SCMagazine is no longer available. . Until recently, systems and security management have usually been seen as separate disciplines. Whil. until, recently, systems, security, management, usually, separate, disciplines. . Anthony Pell
Matt Linzbach submits , "Linux Planet takes a look at EnGarde and interviews Dave [Wreski]. Come on, tell the rest of the world about your great product." The security improvements [over standard distribution packages] in Guardian Digital's products not only reduce the risk of cracker attacks, but also the financial risk and business downtime. The software's ease-of-management techniques also reduces the support costs, provides a consistent configuration every time and enable businesses with limited staff and experience to manage their Internet presence.. . .. Matt Linzbach submits , "Linux Planet takes a look at EnGarde and interviews Dave [Wreski]. Come on, tell the rest of the world about your great product." The security improvements [over standard distribution packages] in Guardian Digital's products not only reduce the risk of cracker attacks, but also the financial risk and business downtime. The software's ease-of-management techniques also reduces the support costs, provides a consistent configuration every time and enable businesses with limited staff and experience to manage their Internet presence. EnGarde Secure Linux, designed to be a massively secure Linux platform, definitely falls towards the more specialized end of the distribution spectrum. Its Guardian Digital makers have consistently maintained their focus on this purpose for the product, and so far, the results are coming along nicely. The link for this article located at LinuxPlanet is no longer available. . Examine Guardian Digital's EnGarde Secure Linux to bolster security and streamline management strategies for your infrastructure.. Secure Linux, System Management, Security Improvements. . LinuxSecurity.com Team
Bruce Schneier speaks on anonymity and other issues involving the future of voting. "The goal of any voting system is to establish the intent of the voter, and transfer that intent to the vote counter. Amongst a circle of friends, a . . . . Bruce Schneier speaks on anonymity and other issues involving the future of voting. "The goal of any voting system is to establish the intent of the voter, and transfer that intent to the vote counter. Amongst a circle of friends, a show of hands can easily decide which movie to attend. The vote is open and everyone can monitor it. But what if Alice wants Charlie's Angels and Bob wants 102 Dalmatians? Will Alice vote in front of his friends? Will Bob? What if the circle of friends is two hundred; how long will it take to count the votes? Will the theater still be showing the movie? Because the scale changes, our voting methods have to change. Anonymity requires a secret ballot. Scaling and speed requirements lead to mechanical and computerized voting systems. The ideal voting technology would have these four attributes: anonymity, scalability, speed, audit, and accuracy--direct mapping from intent to counted vote." The link for this article located at Planet IT is no longer available. . In his analysis, Bruce Schneier explores the complexities surrounding electoral technology, emphasizing the need for both privacy and effective procedures in the democratic process.. Voting Technology, Election Process, Bruce Schneier, Anonymity in Voting. . LinuxSecurity.com Team
There are basically three reasons to use a database, rather than a text file, to store data. The first reason is speed. Accessing data stored in a database is much faster than accessing data stored in a text file. A database is designed for rapid location of information. A text file, you have to read through each record until you find what you are looking for.. . .. There are basically three reasons to use a database, rather than a text file, to store data. The first reason is speed. Accessing data stored in a database is much faster than accessing data stored in a text file. A database is designed for rapid location of information. A text file, you have to read through each record until you find what you are looking for. The second reason is ease of data retrieval. A database--at least, a decent database--provides you with a language (usually SQL) for querying the database for specific information. The third reason is data integrity. Since a database handles a lot of things for you, which you would have to handle for yourself when using a text file, you are less likely to screw up your data, and lose information, when using a real database. The link for this article located at Apache Today is no longer available. . Databases significantly outperform text files in data storage and management, particularly in speed and integrity, ensuring quick retrieval and accuracy. Database Management, Data Integrity, Efficient Storage, Apache Authentication. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.