Embedded Software Handyman
It s been a while since the last post here. And it s been even a longer while since I ve made an open-source contribution. However, during this summer The post Open-Source Contribution: Yocto first appeared on ejaaskel .
In this part of the Yocto hardening we talk about how to verify the integrity of a file system with dm-verity in embedded systems. The post Yocto Hardening: File System Integrity with dm-verity first appeared on ejaaskel .
Let's continue the always-so-fun task of hardening the Yocto systems. This time, we will consider the file system integrity. The post Yocto Hardening: Read-Only Rootfs first appeared on ejaaskel .
Systemd has security features that tend to go underutilised. Especially, the service files have sandboxing features that can be used to isolate the service. The post Sandboxing Systemd Services first appeared on ejaaskel .
Half a year ago, I started a little hobby project of building a hardened Yocto distro, Sulka. I thought that I'd share what's happened over the past months. The post Building Sulka: Six Months of Embedded Linux Development first appeared on ejaaskel .
A few weeks ago, I had some (mis)adventures with SELinux, and after spending almost a whole week debugging weird issues, I felt like I needed to vent a bit. The post “Fun” with SELinux first appeared on ejaaskel .
This text should help you harden U-Boot by fixing the lowest-hanging fruit: unfettered access to the bootloader control interface. The post Protecting U-Boot Command Line first appeared on ejaaskel .
In this blog post we will talk about module signing keys in a situation where the entity developing and signing kernel modules cannot build in their keys. The post Module Signing Keys (Without Building Kernel) first appeared on ejaaskel .
This time we have a relatively simple and effective hardening measure that may prevent big headaches: kernel module signing. The post Yocto Hardening: Kernel Module Signing first appeared on ejaaskel .
This text is a short summary of my presentation at the embedded Linux conference, and talks about humans and cybersecurity. The post Thinking Outside the (Linux) Box: Security Considerations From Human Actors first appeared on ejaaskel .