Categories
Uncategorized

A model

_______________________________________________________________________
|                                                                     |
|                      Linux/Initrd (targeted)                        |
|____________________________   ______________________________________|
|                             ^                                       |
|                      "The system manager"                           |
|                         (unconfined)                                |
|                  _________     _____________                        |
|                  |          ^              |                        |
|                  |                         |                        |
|                  |                         |                        |
|                  |        services         |   Unknown Services     |
|                  |       (targeted)        |                        |
|                  |                         |                        |
|                  |                         |                        |
|   root shell     |                         |                        |
|                  |_________________________|                        |
|                                                                     |
|                                loginshell (dont use this!)      <-(network)-
|                  |--------------------------------------------------|
|                  |         user_u/user_r/loginshell (targeted)  <-(network)-
|                  |--------------------------------------------------|
|                  |                                                  |
|             <- (sudo)-    staff_u/staff_r/loginshell (targeted) <-(network)-
|                  |                                                  |
|__________________|--------------------------------------------------|
|                  |                                                  |
|     root         |                                                  |
|     shell   <- (sudo)-      adm_u/adm_r/loginshell (targeted    <-(network)-
|  (targted)       |                                                  |
|__________________|__________________________________________________|
Categories
Uncategorized

Have new key

It’s messy, but I have a new key for dac.override (at) gmail.com and dominick.grift (at) defensec.nl. (I’am trying to phase out the former in favor of the latter)

This time I have https://wiki.gnupg.org/WKD set up. Get it with gpg --locate-keys dominick.grift (at) defensec.nl

There is no reason to send me unencrypted e-mail anymore.

Categories
Uncategorized

Keep this SHORT

One of my favorite fine wines

Categories
Uncategorized

NEW Website!

… Let’s see how long this one lasts