Latest Linux and open source news from around the web

Crucial BX500 1TB SATA SSD Sponsored · View on Amazon → UNIX and Linux System Administration Handbook Sponsored · View on Amazon →
LPI

DevOps Tools Introduction #08: Container Infrastructure

While Docker makes it easy to start and manage containers, there must still be a base system hosting the containers. These systems form the infrastructure on which containers run and are covered by objective 702.3 of the DevOps Tools Engineer ... Read more The post DevOps Tools Introduction #08: Container Infrastructure appeared first on Linux Professional Institute (LPI).

LPI

DevOps Tools Introduction #08: Container Infrastructure

While Docker makes it easy to start and manage containers, there must still be a base system hosting the containers. These systems form the infrastructure on which containers run and are covered by objective 702.3 of the DevOps Tools Engineer ... Read more The post DevOps Tools Introduction #08: Container Infrastructure appeared first on Linux Professional Institute (LPI).

Linux Journal

CrackArmor Exposed: Critical Flaws in AppArmor Put Millions of Linux Systems at Risk

by George Whittaker A newly disclosed set of vulnerabilities has sent shockwaves through the Linux security community. Dubbed “CrackArmor,” these flaws affect AppArmor, one of the most widely used security modules in Linux, potentially exposing millions of systems to serious compromise. Discovered by the Qualys Threat Research Unit, the vulnerabilities highlight a concerning reality: even core security mechanisms can harbor weaknesses that go unnoticed for years. What Is CrackArmor? “CrackArmor” refers to a group of nine critical vulnerabilities found in the Linux kernel’s AppArmor module. AppArmor is a mandatory access control (MAC) system designed to restrict what applications can do, helping contain attacks and enforce system policies. These flaws stem from a class of issues known as “confused deputy” vulnerabilities, where a lower-privileged user can trick trusted processes into performing actions on their behalf. Why These Vulnerabilities Are Serious The impact of CrackArmor is si

Phoronix

Current RISC-V CPUs Being Too Slow Causes Headaches For Fedora: ~5x Slower Builds

The current crop of RISC-V SoCs are still much slower than alternative CPU architectures and lead to much longer build times for Fedora packages as a result. There's hope with next-gen RISC-V processors being faster but for now even compiling Binutils as an example is around five times slower than x86_64 -- and that's with disabling compiler link-time optimizations (LTO) for RISC-V to avoid an even longer build process...