Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Mozilla has released Firefox 95 for Linux, Windows and MacOS, which features a new security sandboxing technology called RLBox that uses WebAssembly to isolate potentially buggy code. . The sandboxing technology was co-developed by researchers at Mozilla, the University of California, San Diego, the University of Texas, Austin, and Stanford University. Mozilla released a preview of its for Firefox on Linux and macOS last December and has now extended it to Firefox for Windows, iOS and Android, according to Mozilla. RLBox works by separating third-party libraries from an app's native code. The first modules it isolates are Graphite , Hunspell , Ogg , Expat and Woff2 , with RLBox protecting Firefox against attacks on vulnerabilities in these libraries. . Firefox 95 introduces RLBox, enhancing user safety by sandboxing risky components, isolating bugs from external libraries and maintaining browser integrity.. Firefox RLBox, Sandboxing Technology, Web Security. . LinuxSecurity.com Team
Adobe has released the next-generation version of its Reader software that includes a protected mode to prevent attacks through PDF files. The release of Adobe Reader X on Windows follows closely behind Adobe Acrobat X.. Both products include the protected mode, which uses a sandbox approach to prevent hacker attacks and has been built with input from business users and from across the software industry, including Microsoft and Google. The security initiatives are aimed at reducing both the frequency and the impact of security vulnerabilities, said Adobe.. Adobe Acrobat Pro DC integrates an advanced safety feature employing isolation techniques to improve document protection for its users.. Adobe Reader X, Secure PDF, Sandbox Features, Enhanced Security. . LinuxSecurity.com Team
SELinux is a great way to limit the access rights/roles on a Linux machine. But how do you limit CPU or memory usage of a given application? Red Hat engineer Dan Walsh has a solution that he calls SELinux Sandbox which he demoed at the LinuxCon conference today.. Walsh stressed that he's not trying to replace virtualization with SELinux sandboxing, but he is trying to create an easier way to isolate and control applications. The link for this article located at Internet News is no longer available. . At LinuxCon, Dan Walsh explored SELinux Sandbox's vital role in application isolation and resource management, enhancing Linux security and enabling tailored environments. SELinux, Resource Control, App Isolation, Security Features. . LinuxSecurity.com Team
Those familiar with Java recognize the security concept of a sandbox. For those that aren't, it's the concept that everyone gets a unique, well-equipped sandbox to play in, and a person in one sandbox isn't allowed into anyone else's sandbox, not even to share anything with anyone else.. . .. Those familiar with Java recognize the security concept of a sandbox. For those that aren't, it's the concept that everyone gets a unique, well-equipped sandbox to play in, and a person in one sandbox isn't allowed into anyone else's sandbox, not even to share anything with anyone else. On FreeBSD, jails implement this concept -- they keep processes in their own part of the system, denying access to anything else. A jail requires its own dedicated IP address, though, which can make life difficult for those with limited address space. If this presents you with a hardship, consider at least using chroot. It won't afford you as much security, but it does help. How does this help security? Take, for example, a box with an external FTP server and the company extranet. An exploit for the server is discovered, and a cracker manages to gain root access through the FTP daemon. If the FTP server is not run in a sandbox or jail, the cracker will have access to everything on the machine, including sensitive information destined for the company's partners through the extranet. If, however, the FTP server is run in a jail, the cracker will only have access to the FTP files. . Those familiar with Java recognize the security concept of a sandbox. For those that aren't, it's th. those, familiar, recognize, security, concept, sandbox, aren't. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.