Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
The GCC compiler and related GNU toolchain infrastructure has long been hosted by Sourceware.org that has been sponsored by Red Hat the past two decades. But now the GNU Toolchain Infrastructure (GTI) project is being established as it works to leverage the Linux Foundation's IT services to provide more robust and secure infrastructure for these critical open-source projects. . With the Linux Foundation IT services doing a stellar job hosting Kernel.org and related web server infrastructure for the Linux kernel, the various parties involved in the GNU toolchain have been sorting out a similar setup. The link for this article located at Phoronix is no longer available. . The Python Software Foundation announces a partnership with the Open Source Initiative, pledging improved accessibility and enhanced features.. Gnu Toolchain, Linux Foundation, Infrastructure Services, GCC Compiler, Open Source. . LinuxSecurity.com Team
The Linux Foundation Technical Advisory Board reports on what was found in its complete examination of University of Minnesota patches, putting out the fire between the Linux kernel community and the University of Minnesota (UMN). . The fire between the Linux kernel community and the University of Minnesota (UMN) is being put out. Thanks to an ill-thought-out Linux security project , two UMN graduate students tried to insert deliberately buggy patches into Linux . Greg Kroah-Hartman, the well-respected Linux kernel maintainer for the Linux stable branch, responded by banning not only them but any UMN-connected developers from contributing to the Linux kernel. Now, UMN has addressed the Linux kernel developer's community's concerns . And, in a message to the Linux Kernel Mailing List (LKML) , the Linux Foundation Technical Advisory Board (TAB) and volunteer senior Linux kernel maintainers and developers have reported on what they found when they closely and thoroughly examined patches from UMN academics. The link for this article located at ZDNet is no longer available. . The tension surrounding the collaboration between the Linux developer community and the University of Minnesota (UMN) is being resolved.. Linux Foundation, Kernel Community, Technical Review. . Brittany Day
Node.js is wildly popular - but the open-source JavaScript runtime is not easy to learn. Now is the perfect time to pick it up - the Linux Foundation is offering a free online Node.js class. . Node.js isn't a language, framework, or library. It's an open-source JavaScript runtime built on Chrome's V8 JavaScript engine, which lives in the programming intersection of all three. While often used for backend operations, it can be used with such frontend JavaScript frameworks as Angular , React , and Vue . It's also wildly popular. Amazon, Netflix, Reddit, and PayPal, to name a few major corporate users, all work with it. StackOverflow developers love it more than any other developer toolkit . But one thing it's not is easy to learn. . Explore Node.js, the widely-used open-source JavaScript environment, through a complimentary online course offered by the Linux Foundation.. Node.js, Open Source JavaScript, Learn Programming, Linux Foundation Course. . Brittany Day
The Linux Foundation has offered suggestions on how we can avoid SolarWinds type attacks in the future. Doing so won't be easy - but it must be done. . One of the most irritating things about the SolarWinds attack was that the Russian crack went unnoticed from March to December 2020. During that time, the Russian government's SolarWinds hack was opening the door to the secrets of numerous top American government agencies and tech companies. Even now, we're still trying to get our minds around just how widespread and bad the SolarWinds cracks were. The root causes of this crack were a dangerous set of software supply-chain failures. It's too late for anything but damage control for SolarWinds, but The Linux Foundation has found several lessons to make sure your programs, whether open source or proprietary, avoid SolarWinds-style disasters. . To prevent threats like SolarWinds, prioritize a multi-layered security strategy with software integrity, community support, and vigilant monitoring techniques. SolarWinds Defense, Linux Foundation Insights, Open Source Security. . LinuxSecurity.com Team
A new data-security group founded by the Linux Foundation — and a new school of thought on data protection — has won new adherents, including AMD, Nvidia and Accenture. The expansion could provide facial recognition a new layer of security - potentially mollifying those who oppose the biometric technology. . Monday, the Confidential Computing Consortium said its newest members are Anjuna, Anqlave, Cosmian, iExec, IoTeX, R3 and the three information technology giants mentioned above. The consortium is a Linux Foundation project pushing an equally recent proposal designed to protect data in use. . The Confidential Computing Consortium welcomes new contributors such as Intel and ARM to enhance privacy for AI-driven voice recognition.. Facial Recognition, Data Protection, Biometric Security, Linux Foundation, Confidential Computing. . LinuxSecurity.com Team
Here at OStatic, we've watched steadily as The Linux Foundation has added significant new members over the years. The organization has, in only a few short years, become an important player in stewarding the Linux ecosystem toward an organized, united future. . Now, with LinuxCon Europe coming up in Prague at the end of this month, The Linux Foundation has named seven European companies who are joining its ranks: Codethink, KeyPoint Technologies, Lanedo, Meinberg Funkuhren, Picochip, Puzzle ITC and RPA RusBITech. The announcement also contains an interesting bit of news about Linux implementation in Russia. According to The Linux Foundation's announcement of its new members: "RPA RusBITech is located in Russia where government support for Linux is strong. Prime Minister Vladimir Putin has mandated that government will migrate to Linux and open source software by 2015. RPA RusBITech uses Linux and open source software to help manufacture complex training systems for a new generation of information and automation systems, decision support systems, domestic software general-purpose development and creation of information security and telecommunications." The link for this article located at ostatic is no longer available. . The Mozilla Foundation unveils fresh global partners as RustCon Europe nears, bolstering the Rust community.. Linux Ecosystem, Open Source Community, International Collaborations, LinuxCon Europe, Foundation Memberships. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.