User contributions for Mitr

7 June 2010

• 11:4511:45, 7 June 2010 diff hist +355‎ N Encrypted volume passphrase change or recovery GUI ‎ Created page with '== Goals == Goal is to provide a simple GUI tool that allows an user to change volume encryption passphrases, and to recover from a lost passphrase using a backup passphrase (cr...'

2 February 2010

• 16:1416:14, 2 February 2010 diff hist +53‎ Features/ModprobeWhitelist ‎ Link to the patches

29 January 2010

• 19:5019:50, 29 January 2010 diff hist −318‎ Features/ModprobeWhitelist ‎ Update to reflect the code submitted upstream.

26 January 2010

• 14:5714:57, 26 January 2010 diff hist +59‎ Features/ProtectingBinariesUsingCapabilities ‎ Giving up on this for F13
• 14:4514:45, 26 January 2010 diff hist 0‎ Features/ModprobeWhitelist ‎ →‎Current status

25 January 2010

• 13:4513:45, 25 January 2010 diff hist +3,826‎ N Features/ProtectingBinariesUsingCapabilities ‎ Created page with '= Protecting Binaries using Capabilities = == Summary == Change permissions of binaries (executables, and probably shared libraries as well) to make them non-writeable even by o...'

22 January 2010

• 10:5910:59, 22 January 2010 diff hist +35‎ Features/ModprobeWhitelist ‎ Improve the motivation description
• 10:4510:45, 22 January 2010 diff hist +677‎ Features/ModprobeWhitelist ‎ Fill in "Documentation" and "Release notes" sections.

21 January 2010

• 20:3320:33, 21 January 2010 diff hist +38‎ Features/ModprobeWhitelist ‎ Use both category names, just to be sure
• 20:3120:31, 21 January 2010 diff hist +3,601‎ N Features/ModprobeWhitelist ‎ Created page with '= modprobe Whitelist = == Summary == Add a whitelist of allowed modules and commands to modprobe, to allow the system administrator to limit the amount of (potentially vulnerabl...'

26 October 2009

• 10:2510:25, 26 October 2009 diff hist −2‎ Disk encryption key escrow use cases ‎ →‎Key escrow during installation: Try to be less confusing about the --escrowcert argument

16 October 2009

• 14:0714:07, 16 October 2009 diff hist +3,351‎ Anaconda/Kickstart ‎ Added --escrowcert and --backuppassphrase documentation

27 July 2009

• 14:4214:42, 27 July 2009 diff hist +36‎ Anaconda/Features/Encrypted Boot IPA key Management ‎ →‎Current status

9 July 2009

• 19:1719:17, 9 July 2009 diff hist +869‎ Anaconda/Features/Encrypted Boot IPA key Management ‎No edit summary

30 June 2009

• 16:4716:47, 30 June 2009 diff hist +156‎ Disk encryption key escrow use cases ‎ →‎Change log
• 16:4616:46, 30 June 2009 diff hist +98‎ Disk encryption key escrow use cases ‎ →‎Key escrow during installation: Store escrow packets in /root, not in the encrypted volumes

12 June 2009

• 18:5618:56, 12 June 2009 diff hist +7‎ Disk encryption key escrow use cases ‎ →‎Key escrow during installation
• 17:4417:44, 12 June 2009 diff hist +83‎ Disk encryption key escrow use cases ‎No edit summary
• 17:3617:36, 12 June 2009 diff hist +116‎ Disk encryption key escrow in IPA ‎ →‎Change Log current
• 17:3517:35, 12 June 2009 diff hist +52‎ Disk encryption key escrow in IPA ‎ →‎LDAP user account
• 17:3417:34, 12 June 2009 diff hist +75‎ Disk encryption key escrow in IPA ‎ →‎"Make a packet available" to a system administrator: Note that ipaEscrowKey is read as ipaXMLRPCServiceAccount
• 15:0115:01, 12 June 2009 diff hist +1,270‎ Talk:Disk encryption key escrow in IPA ‎No edit summary current

8 June 2009

• 15:1915:19, 8 June 2009 diff hist +132‎ Disk encryption key escrow in IPA ‎ →‎Change Log
• 15:1815:18, 8 June 2009 diff hist −14‎ Disk encryption key escrow in IPA ‎ →‎"Make a packet available" to a system administrator: Use the administrator's identity, not ipaXMLRPCServiceAccount.
• 15:1215:12, 8 June 2009 diff hist +2,684‎ Talk:Disk encryption key escrow in IPA ‎ Reply to Dpal's comments

3 June 2009

• 14:1514:15, 3 June 2009 diff hist +90‎ Disk encryption key escrow in IPA ‎No edit summary
• 14:1414:14, 3 June 2009 diff hist +1‎ m Disk encryption key escrow in IPA ‎ →‎Automatic key expiration
• 14:1214:12, 3 June 2009 diff hist +20‎ Disk encryption key escrow in IPA ‎ →‎Change master key passphrase
• 14:0914:09, 3 June 2009 diff hist +71‎ m Disk encryption key escrow in IPA ‎ →‎Add a master key
• 14:0914:09, 3 June 2009 diff hist +1‎ Disk encryption key escrow in IPA ‎ →‎"Make a packet available" to a system administrator
• 14:0114:01, 3 June 2009 diff hist +156‎ Disk encryption key escrow in IPA ‎ →‎"Make a packet available" to a system administrator
• 13:5613:56, 3 June 2009 diff hist +95‎ N File:Key management master key unwrapping prototype.c gz.bin ‎ A prototype implementation of unwrapping a PKCS#12 container in order to decrypt a CMS content. current
• 13:4913:49, 3 June 2009 diff hist +95‎ N File:Key management master key unwrapping prototype.c.gz ‎ A prototype implementation of unwrapping a PKCS#12 container in order to decrypt a CMS content. current
• 13:4013:40, 3 June 2009 diff hist +215‎ Disk encryption key escrow in IPA ‎No edit summary
• 13:3713:37, 3 June 2009 diff hist +2‎ Disk encryption key escrow in IPA ‎ →‎Send a packet to the server
• 13:3013:30, 3 June 2009 diff hist +31‎ Disk encryption key escrow in IPA ‎ →‎Get master key certificate
• 13:2113:21, 3 June 2009 diff hist −293‎ Disk encryption key escrow in IPA ‎ →‎Questions

2 June 2009

• 21:0421:04, 2 June 2009 diff hist +23‎ Disk encryption key escrow in IPA ‎ →‎Questions
• 20:3320:33, 2 June 2009 diff hist +430‎ Disk encryption key escrow in IPA ‎ →‎Data in LDAP
• 20:2920:29, 2 June 2009 diff hist +679‎ Disk encryption key escrow in IPA ‎ →‎IPA configuration
• 19:0919:09, 2 June 2009 diff hist +2,111‎ Disk encryption key escrow in IPA ‎No edit summary
• 18:3718:37, 2 June 2009 diff hist +1,839‎ Disk encryption key escrow in IPA ‎No edit summary
• 18:0018:00, 2 June 2009 diff hist +2,906‎ Disk encryption key escrow in IPA ‎No edit summary
• 17:3317:33, 2 June 2009 diff hist +94‎ Disk encryption key escrow in IPA ‎ →‎List packets
• 16:5816:58, 2 June 2009 diff hist +4,087‎ Disk encryption key escrow in IPA ‎No edit summary
• 14:0014:00, 2 June 2009 diff hist −1,380‎ Disk encryption key escrow in IPA ‎ →‎Other data

1 June 2009

• 16:4116:41, 1 June 2009 diff hist +3,659‎ N Virt guest disk image encryption use cases ‎ Created page with 'The low-level functionality is also available through <code>virsh</code>, but it's not expected users will access it that way. == Using a management server == === Creating an e...' current
• 16:4016:40, 1 June 2009 diff hist +7,156‎ N Disk encryption key escrow in IPA ‎ Created page with '== Data in LDAP == === Escrow packet storage === Stored in <code>ipaUniqueID=..., cn=volume_keys, dc=...</code>. The following information is stored per each packet: {| borde...'
• 16:3916:39, 1 June 2009 diff hist +11,533‎ N Disk encryption key escrow use cases ‎ Created page with '== Change log == * May 26: Updated to match the implemented <code>volume_key</code> command-line interface. == Key escrow == The escrow packet may be encrypted using a certifi...'
• 16:3716:37, 1 June 2009 diff hist 0‎ N File:Disk encryption format LVM crypt.png ‎No edit summary current