MFS Meeting. Tue, 20 Nov. "NCSC End User Device security - Installer. AppArmor+auditd. GRUB."

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============0600857296==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="WkKuD6Swt4cbF0GKa6kKmUmwhtswV6PVT"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--WkKuD6Swt4cbF0GKa6kKmUmwhtswV6PVT
Content-Type: multipart/mixed; boundary="O3gO52ZVECrm9bPIcTj3UCVXBnOj3jn2e";
 protected-headers="v1"
From: Michael Dorrington <[email protected]>
To: Manchester Free Software <[email protected]>
Cc: Free Software and the United Kingdom <fsfe-uk-mXXj517/[email protected]>,
 "Open Rights Group (ORG) Manchester"
 <org-manchester-ZwoEplunGu0Bf2Lc/[email protected]>,
 Liverpool Linux User Group <[email protected]>,
 Sheffield LUG <[email protected]>,
 East Lancs / Rossendale LUG <rosslug-9k/[email protected]>,
 Blackpool LUG <[email protected]>,
 South Cheshire GNU/Linux Users <[email protected]>,
 Bradford LUG <[email protected]>
Message-ID: <877f378e-3731-b41c-ffa3-d74cf56eb584-IGUgQLVVQiRCV4ILt04nZQ@public.gmane.org>
Subject: MFS Meeting. Tue, 20 Nov. "NCSC End User Device security - Installer.
 AppArmor+auditd. GRUB."

--O3gO52ZVECrm9bPIcTj3UCVXBnOj3jn2e
Content-Type: text/plain; charset=utf-8
Content-Language: en-GB
Content-Transfer-Encoding: quoted-printable

Please forward this notice to those that would welcome it.

You can subscribe to the Manchester Free Software mailing list at:
https://lists.nongnu.org/mailman/listinfo/fsuk-manchester

* Event: Manchester Free Software's November Meeting

* 45 minute slot: AppArmor + auditd
* 15 minute slot 1: Debian Installer Preseeding for security
* 15 minute slot 2: Boot process hardening including GRUB
* 15 minute slot 3: Security monthly round-up

* Date: Tuesday, 20th November 2018 (3rd Tuesday of the month)
* Start time: 19:00
* Finish time: 21:00

* Location: PLANT NOMA
  - https://madlab.org.uk/2018/04/madlab-and-plant-noma
  - https://www.plantnoma.com/
* Address: Redfern, Dantzic Street, NOMA, M60 0AE.
  - Near Shudehill Interchange and not far from original Madlab.
  - https://www.openstreetmap.org/#map=3D19/53.48668/-2.23934


=3D=3D Details =3D=3D

=3D=3D=3D Introduction =3D=3D=3D

The purpose of Manchester Free Software is to promote the Free Software
philosophy.

Every meeting we start with an opportunity for informal key signing.
For this you'll need to bring paper OpenPGP fingerprint slips, see
`gpg-key2ps` from the `signing-party` package (or equivalent in your
GNU/Linux distro):
https://packages.debian.org/signing-party


=3D=3D=3D Schedule =3D=3D=3D

19:00-19:05 Introduction and key signing
19:05-19:20 Debian Installer Preseeding for security
19:20-19:25 Short Break (5 minutes)
19:25-20:10 AppArmor + auditd
20:10-20:25 Long Break (15 minutes)
20:25-20:40 Boot process hardening including GRUB
20:40-20:45 Short Break (5 minutes)
21:45-21:00 Security monthly round-up


=3D=3D=3D Topic details =3D=3D=3D

The topics in this month's meeting will cover some elements of the
National Cyber Security Centre (NCSC) End User Device (EUD) Security
Guidance for GNU/Linux.  Given the number of elements in the guidance we
will cover them over 2 meetings.

*
https://en.wikipedia.org/wiki/National_Cyber_Security_Centre_(United_King=
dom)
* https://www.ncsc.gov.uk/
* https://www.ncsc.gov.uk/guidance/eud-security-guidance-ubuntu-1804-lts


=3D=3D=3D=3D AppArmor and auditd =3D=3D=3D=3D

This will be a talk and demo of AppArmor and auditd.  AppArmor helps to
stop applications doing things they shouldn't, particularly from a
security point of view.  And auditd can be used to spot and log events
that are a security concern.

* https://packages.debian.org/apparmor
* https://packages.debian.org/auditd


=3D=3D=3D=3D Debian Installer Preseeding for security =3D=3D=3D=3D

This will be a talk and demo on using Debian Installer preseeding for
security.

The Debian Installer is used by Debian and Debian derivatives to install
the Operating System.  The questions asked in the installer can be
pre-answered by using a preseed file.  The preseed file also allows
running post-installation commands.  These features can be used to
ensure security related items aren't missed during an install.

* https://www.debian.org/releases/stretch/amd64/apb.html.en


=3D=3D=3D=3D Boot process hardening including GRUB =3D=3D=3D=3D

The will be a talk and demo covering hardening the boot process
including GRUB.

GRUB is used as a boot loader for GNU/Linux, which means it gets the
computer from being turned on to running GNU/Linux.  GRUB can be locked
down to provide additional security.  Similar steps can be taken in the
computer's BIOS / UEFI.

* https://www.gnu.org/software/grub/


=3D=3D=3D=3D Security monthly round-up =3D=3D=3D=3D

Our monthly round-up of Free Software security issues and tips.


=3D=3D Location =3D=3D

The meeting will take place at the usual PLANT NOMA, details above.


=3D=3D Transport =3D=3D


=3D=3D=3D Parking =3D=3D=3D

Around the venue there are parking meter bays that become zero cost
after 8pm on Tuesday so you will have to pay up until then and the
maximum stay is 2 hours BUT MAKE SURE YOU VERIFY ALL THIS on parking.

There are paid parking lots around the venue, they are marked by a blue
P in this OpenStreetMap centred on PLANT NOMA
<https://www.openstreetmap.org/#map=3D15/53.48668/-2.23934>.  Most of
those parking lots are owned by NCP <http://www.ncp.co.uk/>.

If you can't decide otherwise then park in Manchester Arndale
<https://www.manchesterarndale.com/visiting/directions>.


=3D=3D=3D Public Transport =3D=3D=3D

Manchester Victoria (MCV) train station, Shudehill tram and bus station,
and Manchester Piccadilly bus station are all fairly close to PLANT
NOMA, see OpenStreetMap centred on PLANT NOMA
<https://www.openstreetmap.org/#map=3D15/53.48668/-2.23934>.

Manchester Piccadilly (MAN) train station and Manchester Central Coach
Station are not too far away either.


=3D=3D More Information =3D=3D

Information about Manchester Free Software can be found on the
Manchester Free Software pages on LibrePlanet
<https://libreplanet.org/wiki/Manchester>.

Regards,
Mike.
MFS Chair.

--=20
FSF member #9429
http://www.fsf.org/register_form?referrer=3D9429
http://www.fsf.org/about
"The Free Software Foundation (FSF) is a nonprofit with a worldwide
mission to promote computer user freedom and to defend the rights of all
free software users."


--O3gO52ZVECrm9bPIcTj3UCVXBnOj3jn2e--

--WkKuD6Swt4cbF0GKa6kKmUmwhtswV6PVT
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=lrF0
-----END PGP SIGNATURE-----

--WkKuD6Swt4cbF0GKa6kKmUmwhtswV6PVT--


--===============0600857296==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCkxpdmVycG9vbCBtYWlsaW5nIGxpc3QKTGl2ZXJwb29sQG1haWxtYW4ubHVnLm9yZy51awpo
dHRwczovL21haWxtYW4ubHVnLm9yZy51ay9tYWlsbWFuL2xpc3RpbmZvL2xpdmVycG9vbA==

--===============0600857296==--