Reminder: MFS Meeting. Tue, 15 Jan. "NCSC End User Device security - IPsec StrongSWAN, user setup, file systems, auto updates."

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============5631676007484391214==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="2A5OqML17dTQA0FaaUpmkrpbMxgZHGvqo"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--2A5OqML17dTQA0FaaUpmkrpbMxgZHGvqo
Content-Type: multipart/mixed; boundary="qtawtXSqZjr8ffYRIJ51H4F0UAtjRxG73";
 protected-headers="v1"
From: Michael Dorrington <[email protected]>
To: Manchester Free Software <[email protected]>
Cc: Free Software and the United Kingdom <fsfe-uk-mXXj517/[email protected]>
Message-ID: <0142f161-d406-d794-12c9-ecb37a07f5b0-IGUgQLVVQiRCV4ILt04nZQ@public.gmane.org>
Subject: Reminder: MFS Meeting. Tue, 15 Jan. "NCSC End User Device security -
 IPsec StrongSWAN, user setup, file systems, auto updates."
References: <8851643a-893e-f132-cc78-248e4e065632-IGUgQLVVQiRCV4ILt04nZQ@public.gmane.org>
In-Reply-To: <8851643a-893e-f132-cc78-248e4e065632-IGUgQLVVQiRCV4ILt04nZQ@public.gmane.org>

--qtawtXSqZjr8ffYRIJ51H4F0UAtjRxG73
Content-Type: text/plain; charset=utf-8
Content-Language: en-GB
Content-Transfer-Encoding: quoted-printable

Reminder that the meeting is tomorrow (Tuesday) 7pm at our new venue of
the Manchester Technology Centre.

On 11/01/2019 09:29, Michael Dorrington wrote:
> NOTE: This meeting will be the first meeting at our new location of the=

> Manchester Technology Centre.
>=20
> Please forward this notice to those that would welcome it.
>=20
> You can subscribe to the Manchester Free Software mailing list at:
> https://lists.nongnu.org/mailman/listinfo/fsuk-manchester
>=20
> * Event: Manchester Free Software's January Meeting
>=20
> * 45 minute slot: StrongSWAN IPsec VPN
> * 15 minute slot 1: Securing user setup
> * 15 minute slot 2: Securing file systems
> * 15 minute slot 3: Automatic updates
>=20
> * Date: Tuesday, 15th January 2019 (3rd Tuesday of the month)
> * Start time: 19:00
> * Finish time: 21:00
>=20
> * Location: Manchester Technology Centre
>   - https://mspl.co.uk/campuses/manchester-technology-centre/
> * Address: Oxford Road, Manchester. M1 7ED.
>   - By the Mancunian Way flyover.
>   - https://www.openstreetmap.org/#map=3D18/53.47222/-2.23792
>=20
>=20
> =3D=3D Details =3D=3D
>=20
> =3D=3D=3D Introduction =3D=3D=3D
>=20
> The purpose of Manchester Free Software is to promote the Free Software=

> philosophy.
>=20
> Every meeting we start with an opportunity for informal key signing.
> For this you'll need to bring paper OpenPGP fingerprint slips, see
> `gpg-key2ps` from the `signing-party` package (or equivalent in your
> GNU/Linux distro):
> https://packages.debian.org/signing-party
>=20
>=20
> =3D=3D=3D Schedule =3D=3D=3D
>=20
> 19:00-19:05 Introduction and key signing
> 19:05-19:20 Securing user setup
> 19:20-19:25 Short Break (5 minutes)
> 19:25-20:10 StrongSWAN IPsec VPN
> 20:10-20:25 Long Break (15 minutes)
> 20:25-20:40 Securing file systems
> 20:40-20:45 Short Break (5 minutes)
> 21:45-21:00 Automatic updates
>=20
>=20
> =3D=3D=3D Topic details =3D=3D=3D
>=20
> The topics in this month's meeting will cover elements of the
> National Cyber Security Centre (NCSC) End User Device (EUD) Security
> Guidance for GNU/Linux.  Given the number of elements in the guidance w=
e
> split them over 2 meetings.  This is the second meeting but is
> essentially self-contained and independent from the first meeting.
>=20
> *
> https://en.wikipedia.org/wiki/National_Cyber_Security_Centre_(United_Ki=
ngdom)
> * https://www.ncsc.gov.uk/
> * https://www.ncsc.gov.uk/guidance/eud-security-guidance-ubuntu-1804-lt=
s
>=20
>=20
> =3D=3D=3D=3D StrongSWAN IPsec VPN =3D=3D=3D=3D
>=20
> This will be a talk and demo of StrongSWAN IPsec VPN.  IPsec helps to
> secure network communication for computers.  The talk will implement th=
e
> most secure mode suggested in the NCSC guidance which is known as PRIME=
=2E
>  We will also briefly discuss alternatives to StrongSWAN and IPsec.
>=20
> * https://www.strongswan.org/
> * https://en.wikipedia.org/wiki/IPsec
> * https://www.ncsc.gov.uk/guidance/using-ipsec-protect-data
>=20
>=20
> =3D=3D=3D=3D Securing user setup =3D=3D=3D=3D
>=20
> This will be a talk and demo about securing user setup.  This includes
> ensuring the quality of user passwords, screen lock timings, password
> ageing (or not), home directory permissions and so on.
>=20
> * https://packages.debian.org/libpam-pwquality
>=20
>=20
> =3D=3D=3D=3D Securing file systems =3D=3D=3D=3D
>=20
> This talk will be about securing file systems.  File systems are mounte=
d
> with mount options and these can restrict what can be done such as if
> files can be executed.  Directories and files can have their permission=
s
> and ownership altered to be more secure.  We will explore the NCSC
> guidance on this.
>=20
> * https://packages.debian.org/mount
> * https://packages.debian.org/coreutils
>=20
>=20
> =3D=3D=3D=3D Automatic updates =3D=3D=3D=3D
>=20
> One of the greatest improvements to security can be obtained by
> installing security updates promptly and ensuring you are on security
> support software.  This is not only about packages installed via your
> distro's packaging system but also software installed by other means
> such as containers including Flatpak.
>=20
> * https://packages.debian.org/unattended-upgrades
> * https://packages.debian.org/debian-security-support
> * https://en.wikipedia.org/wiki/Flatpak
>=20
>=20
> =3D=3D Location =3D=3D
>=20
> The meeting will take place at our new venue of Manchester Technology
> Centre, details above.
>=20
>=20
> =3D=3D Transport =3D=3D
>=20
>=20
> =3D=3D=3D Parking =3D=3D=3D
>=20
> Please research and decide where to park before heading on your journey=

> and have a Plan B.
>=20
> There are paid parking lots around the venue, they are marked by a blue=

> P in OpenStreetMap centred on Manchester Technology Centre:
> https://www.openstreetmap.org/#map=3D16/53.4722/-2.2379
>=20
> Most of those parking lots are owned by NCP:
> http://www.ncp.co.uk/
>=20
> In some of the side streets in the venue surrounding area there are
> parking meter bays that become zero cost after 8pm on Tuesday so you
> will have to pay up until then and the maximum stay is 2 hours BUT MAKE=

> SURE YOU VERIFY ALL THIS on parking.  This is probably only a good
> option if you know the area.
>=20
> If you can't decide where to park then ask me for advice.
>=20
>=20
> =3D=3D=3D Public Transport =3D=3D=3D
>=20
> Closest train stations to the venue are:
>=20
> * Manchester Oxford Road (MCO) train station
> * Manchester Piccadilly (MAN) train station
>=20
> For other public transport see OpenStreetMap using the "Transport" laye=
r
> centred on Manchester Technology Centre:
> https://www.openstreetmap.org/#map=3D15/53.4722/-2.2379&layers=3DT
>=20
>=20
> =3D=3D More Information =3D=3D
>=20
> Information about Manchester Free Software can be found on the
> Manchester Free Software pages on LibrePlanet:
> https://libreplanet.org/wiki/Manchester
>=20
> Regards,
> Mike.
> MFS Chair.
>=20


--=20
FSF member #9429
http://www.fsf.org/register_form?referrer=3D9429
http://www.fsf.org/about
"The Free Software Foundation (FSF) is a nonprofit with a worldwide
mission to promote computer user freedom and to defend the rights of all
free software users."


--qtawtXSqZjr8ffYRIJ51H4F0UAtjRxG73--

--2A5OqML17dTQA0FaaUpmkrpbMxgZHGvqo
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEymnV/lrtCqpNhpze13JsPqr44+8FAlw9CHAACgkQ13JsPqr4
4+92KxAAuSfr6j8zcpA7lhhyqYXCIK5xZbvoDHiXNI3S3PJsBQXoixtnM5alHt2U
Vdkpp+PIbrogPZ4qp6PoKirHPT3BlRleTWCzMImKufqfNPL3cH5rgUfW6XN6tlRT
uTdHl193gj/yFQ481XsGTBoDoMdnPEp3RgUr7GPZt3mv4jzXLeKv9wjgpjPEj0HM
nE4h9Q4ob/W9GodjYnr6VZ+zg5224dOjj667tWoIWG3ksZthT7CDBN8suTt3NK+G
OqcQBOwT7jojbr9cLO2Mi2L0ICfXUbQDQ/LquNoGhASc0R8NUd2lbdcGnnPe6YcT
utD5YRX5qQYEk7G7ZjJ74MyG6YOyhBNm33bP8tbzZoLEmnJVLiptwUzfQ/5t71tf
KyCIkqzTLT5Q/xmFFSQaQCrH1vq8qMAkGudo/oS7kxeAUFVBvtdUjYwytKTY5GR2
WO4w5im0YybQDhnK8D5b7GVW48CgcjgJ8seyZSkVjn2pXIV+lnjxRROtuCNTZVCH
GLCvptcmlQU8dK1YpLK9jPOfwdYNIDlGJCu7H9riTzNshpjzv7SCzfxXnETCJAF+
DQdWYPBnSYWSrMIXCked7iR00vsmRkQWQp6ZL/J7PVUYvw8sRm56NG2YgxE64yOV
WG1yDPldLAgx1Ww7kRTtAzPlWaVk678oPRs19hopHuQT59IqgC4=
=NItN
-----END PGP SIGNATURE-----

--2A5OqML17dTQA0FaaUpmkrpbMxgZHGvqo--


--===============5631676007484391214==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Fsuk-manchester mailing list
[email protected]
https://lists.nongnu.org/mailman/listinfo/fsuk-manchester

--===============5631676007484391214==--