<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div dir="ltr"></div><div dir="ltr">Bonjour,</div><div dir="ltr"><br></div><div dir="ltr">Je trouve ça scandaleux et dégueulasse ce qui révèle Géopolitis moi je tiens à ma vie privée. Je ne veux pas être espionné par cette machine</div><div dir="ltr"><br></div><div dir="ltr">Il est temps d’agir</div><div dir="ltr"><br></div><div dir="ltr">Meilleures salutations</div><div dir="ltr"><br></div><div dir="ltr">mparchet </div><div dir="ltr"><br><blockquote type="cite">Le 19 mai 2023 à 20:28, catseyechandra via gull <gull@forum.linux-gull.ch> a écrit :<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div style="font-family: Arial, sans-serif; font-size: 14px;"><span>Quelques liens au sujet de la sécurité informatique :</span><div><br></div><div><span>Intel Management Engine, plus précisément Converged Security and Management Engine :</span></div><div><br></div><div><span><a target="_blank" rel="noreferrer nofollow noopener" href="https://en.wikipedia.org/wiki/Intel_Management_Engine">https://en.wikipedia.org/wiki/Intel_Management_Engine</a></span></div><div><span><a target="_blank" rel="noreferrer nofollow noopener" href="https://www.intel.com/content/www/us/en/download/19392/intel-converged-security-and-management-engine-version-detection-tool-intel-csmevdt.html">https://www.intel.com/content/www/us/en/download/19392/intel-converged-security-and-management-engine-version-detection-tool-intel-csmevdt.html</a></span></div><div><br></div><div><span>AMD Platform Security Processors :</span></div><div><br></div><div><span><a target="_blank" rel="noreferrer nofollow noopener" href="https://en.wikipedia.org/wiki/AMD_Platform_Security_Processor">https://en.wikipedia.org/wiki/AMD_Platform_Security_Processor</a></span></div><div><br></div><div><span>(Il y a une jolie collection de liens en références sur ces deux pages wikipedia).</span></div><div><br></div><div><span>Géopolitis "Tous espionnés" :</span></div><div><br></div><div><span><a target="_blank" rel="noreferrer nofollow noopener" href="https://pages.rts.ch/emissions/geopolitis/13761978-tous-espionnes.html">https://pages.rts.ch/emissions/geopolitis/13761978-tous-espionnes.html</a></span></div><div><br></div><div><span>Reportage "Pegasus, un espion dans votre poche" :</span></div><div><br></div><div><span><a target="_blank" rel="noreferrer nofollow noopener" href="https://www.youtube.com/watch?v=-pIAM6ZH3IA">https://www.youtube.com/watch?v=-pIAM6ZH3IA</a></span></div><div><br></div><div><span>(J'hypothèse que les prochaines grosses du genre ce sera avec des toolkit sorits du monde sécuritaire par des flics pourris ou extrémistes...)</span></div><div><br></div><div><span>Kernel Self Protection Project :</span></div><div><br></div><div><span><a target="_blank" rel="noreferrer nofollow noopener" href="http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project">http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project</a></span></div><div><span><a target="_blank" rel="noreferrer nofollow noopener" href="http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings">http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings</a></span></div><div><br></div><div><span>Un script pour appliquer ces settings sur une config du noyau préexistante :</span></div><div><br></div><div><span>--8<--</span></div><div><span>#!/usr/bin/env python3</span></div><div><br></div><div><span>import argparse</span></div><div><span>import re</span></div><div><span>from pprint import pprint</span></div><div><br></div><div><br></div><div><span>reEn = re.compile("^(CONFIG[_A-Za-z0-9]+)\s*=\s*(y|m|-?[0-9]+|0x[0-9a-fA-F]+|\".*\")\s(.*)$")</span></div><div><span>reDis = re.compile("^\#\s*(CONFIG[_A-Za-z0-9]+)\s(.*)$")</span></div><div><span>reComment = re.compile("^\#\s*(.*)$")</span></div><div><br></div><div><span>def cf_parse(line):</span></div><div><span> if (m := reEn.match(line)):</span></div><div><span> return ('config', m.group(1), m.group(2))</span></div><div><span> elif (m := reDis.match(line)):</span></div><div><span> return ('config', m.group(1), 'n')</span></div><div><span> elif (m := reComment.match(line)):</span></div><div><span> return ('comment', m.group(1))</span></div><div><span> elif (line == '\n'):</span></div><div><span> return ('blank',)</span></div><div><span> else:</span></div><div><span> raise ValueError</span></div><div><br></div><div><span>def cf_write(cf_line):</span></div><div><span> # if blank return a CR</span></div><div><span> if (cf_line[0] == 'blank'):</span></div><div><span> return ''</span></div><div><span> # a comment, write it cleanly</span></div><div><span> elif (cf_line[0] == 'comment'):</span></div><div><span> if (cf_line[1] == ''):</span></div><div><span> return '#'</span></div><div><span> else:</span></div><div><span> return "# {}".format(cf_line[1])</span></div><div><span> elif (cf_line[0] == 'config'):</span></div><div><span> # a disbled config</span></div><div><span> if (cf_line[2] == 'n'):</span></div><div><span> return "# {} is not set".format(cf_line[1])</span></div><div><span> # a yes/module/int/hex int/string config line</span></div><div><span> else:</span></div><div><span> return "{}={}".format(cf_line[1], cf_line[2])</span></div><div><br></div><div><br></div><div><span>if __name__=="__main__":</span></div><div><span> ap = argparse.ArgumentParser(description=</span></div><div><span> """ Linux kernel configuration files blending, using one base file</span></div><div><span> and a probably smaller set of configurations which must takes</span></div><div><span> precedence on the base config. """)</span></div><div><span> ap.add_argument('base_config', nargs='?', default='.config')</span></div><div><span> ap.add_argument('precedence_config')</span></div><div><span> app = ap.parse_args()</span></div><div><br></div><div><span> print('# Blended linux kernel configuration using <a target="_blank" rel="noreferrer nofollow noopener" href="http://kconf-precedence.py">kconf-precedence.py</a>')</span></div><div><span> print("# Base configuration file :", app.base_config)</span></div><div><span> print("# Precedence configuration file :", app.precedence_config)</span></div><div><br></div><div><span> fhb = open(app.base_config)</span></div><div><span> precedence = {}</span></div><div><span> fhp = open(app.precedence_config)</span></div><div><br></div><div><span> # parse precedence config</span></div><div><span> precedences = {}</span></div><div><span> for line in fhp.readlines():</span></div><div><span> cf = cf_parse(line)</span></div><div><span> if cf[0] == 'config':</span></div><div><span> # first in precedence val is a ref counter</span></div><div><span> precedences[cf[1]] = [0, cf[2]]</span></div><div><br></div><div><span> # parse and modifiy base config</span></div><div><span> for line in fhb.readlines():</span></div><div><span> cf = cf_parse(line)</span></div><div><span> if cf[0] == 'config':</span></div><div><span> try:</span></div><div><span> # increment traversed counter in precedence</span></div><div><span> precedences[cf[1]][0] += 1</span></div><div><span> # output precedence to stdout</span></div><div><span> print(cf_write( ('config', cf[1], precedences[cf[1]][1]) ))</span></div><div><span> except KeyError:</span></div><div><span> print(cf_write(cf))</span></div><div><br></div><div><span> # Output the precedences which are not in the base config set</span></div><div><span> print("# Now for the config statements remaining after base config iteration...")</span></div><div><span> # pprint(precedences)</span></div><div><span> for k in precedences.keys():</span></div><div><span> if precedences[k][0] == 0: # not traversed before</span></div><div><span> print(cf_write( ('config', k, precedences[k][1]) ))</span></div><div><br></div><div><span> print("# end of configuration")</span></div><div><span>--8<--</span></div><div><br></div><div><span>Très bon guide sécurité en terme de sysadmin Linux :</span></div><div><br></div><div><span><a target="_blank" rel="noreferrer nofollow noopener" href="https://vez.mrsk.me/linux-hardening.html">https://vez.mrsk.me/linux-hardening.html</a></span></div><div><span><a target="_blank" rel="noreferrer nofollow noopener" href="https://news.ycombinator.com/item?id=33373021">https://news.ycombinator.com/item?id=33373021</a></span></div><div><br></div><div><span>Je cherche un latop intel 13ème génération avec Wireless désactivable de manière hardware (hardware RF Kill Switch) et mode HAP dans l'UEFI pour l'IME/CSEM pas trop trop cher, vos recommendations sont les bienvenues.</span></div><span></span><br></div><span>_______________________________________________</span><br><span>gull mailing list</span><br><span>gull@forum.linux-gull.ch</span><br><span>https://forum.linux-gull.ch/mailman/listinfo/gull</span></div></blockquote></body></html>