enterprise linux security

Episode 7 – ELevate

by
Play

Podcast: Play in new window | Download (Duration: 52:13 — 119.8MB)

Subscribe: Apple Podcasts | Spotify | RSS

Remaining on legacy Linux distributions can lead to additional security risks as time goes on, and migrating to a newer and better supported distribution can be a very difficult endeavor for most administrators. In this episode, Jay and Joao are joined by Jack from AlmaLinux, and we talk about ELevate – a tool that can be used to migrate from a distribution in the Enterprise Linux family to another Enterprise Linux distribution. This helps alleviate some of the burden of distro migration, and as a community project it’s also a great project to get started with contributing to an open-source project.

Episode Downloads

Episode 6 – Image Defaults

by
Play

Podcast: Play in new window | Download (Duration: 1:17:45 — 142.5MB)

Subscribe: Apple Podcasts | Spotify | RSS

Although there’s no such thing as a “perfect” deployment image, including some sane defaults into your images and templates can save you a lot of work down the road, and also give you the opportunity to include more secure defaults. In this episode, we’ll discuss deployment image defaults as well as some recent news.

Episode 5 – The “Attacker” Mindset

by
Play

Podcast: Play in new window | Download (Duration: 1:06:48 — 91.9MB)

Subscribe: Apple Podcasts | Spotify | RSS

We’ve talked about Enterprise Linux Security from the worldview of the system administrator, but what’s it like on the other side? In this episode, Jay and Joao are joined by Atalay Kelestemur, an Ethical Hacker, as we discuss the mindset of the attacker.

Episode 4 – Supply Chain Attacks

by
Play

Podcast: Play in new window | Download (Duration: 43:58 — 100.8MB)

Subscribe: Apple Podcasts | Spotify | RSS

When you write software, there’s no reason to reinvent the wheel – shared libraries and other resources exist to enable you to create applications while avoiding redundant work. Unfortunately, sometimes the software supply itself chain is attacked, which would mean that your application contain malware or security threats you didn’t account for. In this episode of Enterprise Linux Security, Joao and I discuss supply chain attacks, as well as some ways to mitigate this threat.

Video-specific Links

Supply chain Levels for Software Artifacts (SLSA)

The Software Package Data Exchange (SPDX)

Episode 2 – Attack Vectors

by
Play

Podcast: Play in new window | Download (Duration: 46:02 — 105.7MB)

Subscribe: Apple Podcasts | Spotify | RSS

Regardless of your role in your company, understanding the various types of attack vectors is extremely important. In this episode of Enterprise Linux Security, Jay and Joao discuss the most common attack vectors that are used today, which will set the foundation for future episodes.