Marco d'Itri
Marco d'Itri has been involved with Internet operations and policy in Italy since the late '90s, and has been a Debian Developer for almost 30 years.
In Debian, he likes to maintain system packages like netbase, kmod, udev and ppp, Vinyl Cache, the BGP RPKI ecosystem and much more.
Session
10-03
17:00
20min
The state of systemd security sandboxing in Debian
Marco d'Itri
Systemd units have many built-in configuration options that can be used to restrict access of a unit to the rest of the system, with the goal of containing a compromised system service.
Marco will review the state of systemd security sandboxing in Debian packages, what we need to fix to have more and what will break by enabling too much of it.
Cybersecurity and Hacking
STAGE 1 (Section 9)