Author archive

An Open Source Architecture for Security Information

by Security Team

Identity interoperability across Windows and Linux is one area of focus highlighted by Microsoft and Novell in their November 2006 partnership announcements.

Even though there is little detail about what Microsoft and Novell will provide, this aspect of the announcement has generated interest. We will discuss the reasons for this interest, explain Microsoft and Novell’s approach as currently understood, discuss the limits of Active Directory and propose Red Hat’s broader vision for the interoperability of security information.
» Read more

Filed under Security on May 15th, 2007 | Comments Off

Critical Kerberos Telnet Daemon Flaw

by Security Team

A critical flaw was announced today that affects the MIT Kerberos telnet daemon, distributed with all versions of Red Hat Enterprise Linux. With this flaw, an attacker who can access the telnet port of a target machine could log in remotely as root without requiring a password.
» Read more

Filed under Security on April 3rd, 2007 | Comments Off

Reports of Risk

by Security Team

Another security report was released this week that claims to show the “patch development time” for various distributions. Symantec gives some high level results, but none of the detail required to figure out how exactly it got to its results.
» Read more

Filed under Security on March 26th, 2007 | Comments Off

Red Hat Enterprise Linux 5 Security

by Security Team

Operating system security–the topic can evoke strong adjectives. At Red Hat, with regard to security, we are striving to be:

• Innovative: Red Hat leads the way in developing new security technology for Linux. As a result, Red Hat is making secure operating system architectures an affordable, mainstream solution.
• Transparent: The strength of open source development has made Red Hat Enterprise Linux into a highly secure operating system that lowers the cost of security maintenance.
• Vigilant: Red Hat continually looks for potential security exposures and delivers tested security updates through Red Hat Network.
• Inclusive: Red Hat works closely with partners to make sure customers have a choice in building a secure, integrated environment. (For example, Red Hat and IBM are working together to enable organizations to realize the combined security benefits of Red Hat Enterprise Linux with SE Linux running on IBM System z.)

» Read more

Filed under Red Hat Enterprise Linux 5, Security on March 14th, 2007 | Comments Off