Venue change (and reminder): MFS Meeting. Tue, 20 Nov. "NCSC End User Device security - Installer. AppArmor+auditd. GRUB."

Michael Dorrington via Liverpool <[email protected]> Mon, 19 Nov 2018 16:45:54 +0000
Newsgroups gmane.org.user-groups.linux.livlug,gmane.politics.software.free-software.manchester,gmane.org.fsf.uk
Message-ID <[email protected]>
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============0051627969==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="4kWGrjcPr81GPXOsBdJXYbhd4oPhdyycZ"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--4kWGrjcPr81GPXOsBdJXYbhd4oPhdyycZ
Content-Type: multipart/mixed; boundary="F2CI4bBlY0rVSn4MbRKPPVt5bilD72JbZ";
 protected-headers="v1"
From: Michael Dorrington <[email protected]>
To: Manchester Free Software <[email protected]>
Cc: Free Software and the United Kingdom <fsfe-uk-mXXj517/[email protected]>,
 "Open Rights Group (ORG) Manchester"
 <org-manchester-ZwoEplunGu0Bf2Lc/[email protected]>,
 Liverpool Linux User Group <[email protected]>,
 Sheffield LUG <[email protected]>,
 East Lancs / Rossendale LUG <rosslug-9k/[email protected]>,
 Blackpool LUG <[email protected]>,
 South Cheshire GNU/Linux Users <[email protected]>,
 Bradford LUG <[email protected]>
Message-ID: <d0e2df52-6bac-fce3-7bff-e8d69eb34ada-IGUgQLVVQiRCV4ILt04nZQ@public.gmane.org>
Subject: Venue change (and reminder): MFS Meeting. Tue, 20 Nov. "NCSC End User
 Device security - Installer. AppArmor+auditd. GRUB."
References: <877f378e-3731-b41c-ffa3-d74cf56eb584-IGUgQLVVQiRCV4ILt04nZQ@public.gmane.org>
In-Reply-To: <877f378e-3731-b41c-ffa3-d74cf56eb584-IGUgQLVVQiRCV4ILt04nZQ@public.gmane.org>

--F2CI4bBlY0rVSn4MbRKPPVt5bilD72JbZ
Content-Type: text/plain; charset=utf-8
Content-Language: en-GB
Content-Transfer-Encoding: quoted-printable

The meeting tomorrow (Tuesday) has changed venue to:

Pioneer Cafe, Upper Ground Floor,
Federation House,
2 Federation St,
Manchester,
M4 4BF.

and on OpenStreetMap:

https://www.openstreetmap.org/#map=3D19/53.48592/-2.23967

This is very close to the original venue and on the same street; just by
the Shudehill Interchange (tram and bus station) part Dantzic Street.

Still usual time, 7pm.

A big thanks to The Federation http://www.thefederation.coop/ for
providing us with a venue on short notice.

On 16/11/2018 00:17, Michael Dorrington wrote:
> Please forward this notice to those that would welcome it.
>=20
> You can subscribe to the Manchester Free Software mailing list at:
> https://lists.nongnu.org/mailman/listinfo/fsuk-manchester
>=20
> * Event: Manchester Free Software's November Meeting
>=20
> * 45 minute slot: AppArmor + auditd
> * 15 minute slot 1: Debian Installer Preseeding for security
> * 15 minute slot 2: Boot process hardening including GRUB
> * 15 minute slot 3: Security monthly round-up
>=20
> * Date: Tuesday, 20th November 2018 (3rd Tuesday of the month)
> * Start time: 19:00
> * Finish time: 21:00
>=20
> * Location: PLANT NOMA
>   - https://madlab.org.uk/2018/04/madlab-and-plant-noma
>   - https://www.plantnoma.com/
> * Address: Redfern, Dantzic Street, NOMA, M60 0AE.
>   - Near Shudehill Interchange and not far from original Madlab.
>   - https://www.openstreetmap.org/#map=3D19/53.48668/-2.23934
>=20
>=20
> =3D=3D Details =3D=3D
>=20
> =3D=3D=3D Introduction =3D=3D=3D
>=20
> The purpose of Manchester Free Software is to promote the Free Software=

> philosophy.
>=20
> Every meeting we start with an opportunity for informal key signing.
> For this you'll need to bring paper OpenPGP fingerprint slips, see
> `gpg-key2ps` from the `signing-party` package (or equivalent in your
> GNU/Linux distro):
> https://packages.debian.org/signing-party
>=20
>=20
> =3D=3D=3D Schedule =3D=3D=3D
>=20
> 19:00-19:05 Introduction and key signing
> 19:05-19:20 Debian Installer Preseeding for security
> 19:20-19:25 Short Break (5 minutes)
> 19:25-20:10 AppArmor + auditd
> 20:10-20:25 Long Break (15 minutes)
> 20:25-20:40 Boot process hardening including GRUB
> 20:40-20:45 Short Break (5 minutes)
> 21:45-21:00 Security monthly round-up
>=20
>=20
> =3D=3D=3D Topic details =3D=3D=3D
>=20
> The topics in this month's meeting will cover some elements of the
> National Cyber Security Centre (NCSC) End User Device (EUD) Security
> Guidance for GNU/Linux.  Given the number of elements in the guidance w=
e
> will cover them over 2 meetings.
>=20
> *
> https://en.wikipedia.org/wiki/National_Cyber_Security_Centre_(United_Ki=
ngdom)
> * https://www.ncsc.gov.uk/
> * https://www.ncsc.gov.uk/guidance/eud-security-guidance-ubuntu-1804-lt=
s
>=20
>=20
> =3D=3D=3D=3D AppArmor and auditd =3D=3D=3D=3D
>=20
> This will be a talk and demo of AppArmor and auditd.  AppArmor helps to=

> stop applications doing things they shouldn't, particularly from a
> security point of view.  And auditd can be used to spot and log events
> that are a security concern.
>=20
> * https://packages.debian.org/apparmor
> * https://packages.debian.org/auditd
>=20
>=20
> =3D=3D=3D=3D Debian Installer Preseeding for security =3D=3D=3D=3D
>=20
> This will be a talk and demo on using Debian Installer preseeding for
> security.
>=20
> The Debian Installer is used by Debian and Debian derivatives to instal=
l
> the Operating System.  The questions asked in the installer can be
> pre-answered by using a preseed file.  The preseed file also allows
> running post-installation commands.  These features can be used to
> ensure security related items aren't missed during an install.
>=20
> * https://www.debian.org/releases/stretch/amd64/apb.html.en
>=20
>=20
> =3D=3D=3D=3D Boot process hardening including GRUB =3D=3D=3D=3D
>=20
> The will be a talk and demo covering hardening the boot process
> including GRUB.
>=20
> GRUB is used as a boot loader for GNU/Linux, which means it gets the
> computer from being turned on to running GNU/Linux.  GRUB can be locked=

> down to provide additional security.  Similar steps can be taken in the=

> computer's BIOS / UEFI.
>=20
> * https://www.gnu.org/software/grub/
>=20
>=20
> =3D=3D=3D=3D Security monthly round-up =3D=3D=3D=3D
>=20
> Our monthly round-up of Free Software security issues and tips.
>=20
>=20
> =3D=3D Location =3D=3D
>=20
> The meeting will take place at the usual PLANT NOMA, details above.
>=20
>=20
> =3D=3D Transport =3D=3D
>=20
>=20
> =3D=3D=3D Parking =3D=3D=3D
>=20
> Around the venue there are parking meter bays that become zero cost
> after 8pm on Tuesday so you will have to pay up until then and the
> maximum stay is 2 hours BUT MAKE SURE YOU VERIFY ALL THIS on parking.
>=20
> There are paid parking lots around the venue, they are marked by a blue=

> P in this OpenStreetMap centred on PLANT NOMA
> <https://www.openstreetmap.org/#map=3D15/53.48668/-2.23934>.  Most of
> those parking lots are owned by NCP <http://www.ncp.co.uk/>.
>=20
> If you can't decide otherwise then park in Manchester Arndale
> <https://www.manchesterarndale.com/visiting/directions>.
>=20
>=20
> =3D=3D=3D Public Transport =3D=3D=3D
>=20
> Manchester Victoria (MCV) train station, Shudehill tram and bus station=
,
> and Manchester Piccadilly bus station are all fairly close to PLANT
> NOMA, see OpenStreetMap centred on PLANT NOMA
> <https://www.openstreetmap.org/#map=3D15/53.48668/-2.23934>.
>=20
> Manchester Piccadilly (MAN) train station and Manchester Central Coach
> Station are not too far away either.
>=20
>=20
> =3D=3D More Information =3D=3D
>=20
> Information about Manchester Free Software can be found on the
> Manchester Free Software pages on LibrePlanet
> <https://libreplanet.org/wiki/Manchester>.
>=20
> Regards,
> Mike.
> MFS Chair.
>=20


--=20
FSF member #9429
http://www.fsf.org/register_form?referrer=3D9429
http://www.fsf.org/about
"The Free Software Foundation (FSF) is a nonprofit with a worldwide
mission to promote computer user freedom and to defend the rights of all
free software users."


--F2CI4bBlY0rVSn4MbRKPPVt5bilD72JbZ--

--4kWGrjcPr81GPXOsBdJXYbhd4oPhdyycZ
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=4zlQ
-----END PGP SIGNATURE-----

--4kWGrjcPr81GPXOsBdJXYbhd4oPhdyycZ--


--===============0051627969==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCkxpdmVycG9vbCBtYWlsaW5nIGxpc3QKTGl2ZXJwb29sQG1haWxtYW4ubHVnLm9yZy51awpo
dHRwczovL21haWxtYW4ubHVnLm9yZy51ay9tYWlsbWFuL2xpc3RpbmZvL2xpdmVycG9vbA==

--===============0051627969==--