SEARCH RESULTS
 
Showing 1-10 of 12 records
 
Expand article

Setting file ACLs with PowerShell part 5

2008-01-09 04:53:00 by Keith Brown in Security Briefs
 
...ACLs, there are basically three steps you have to take Read the ACL from an object Tweak it however you like Write the ACL back to the object In this last line of code, I'm applying the new, tweaked ACL back to the file foo.txt. At this point the new access control policy takes effect Navigate posts in this series: prev
 
 
 
 
 
Expand article

The Oracle speaks

2008-05-07 19:55:42 by HASH0x8472728 in StillSecure, After All These Years
 
...ACLs, I agree with Joel that ACLs are a great way to do things... But not with routers and DHCP enforcement. If you have HP switches or Extreme Switches then you can do dynamic ACLs per port. Similar to how you assign a VLAN via RADIUS attributes, you can assign ACLs for that port in addition to assigning a VLAN. This is great if you have the...
 
 
 
 
 
Expand article

Joel Snyder's lengthy interview on NAC

2008-05-07 06:03:28 by HASH0x8472f98 in StillSecure, After All These Years
 
...ACLs versus VLANs There is a ton of good stuff there but I disagree with Joel on two things. I think NAP will lead to rapid and broad NAP adoption. But right now Joel suffers from lab-a-titis. Yes NAP is great in the lab, but who has Vista and Server 2008 in the real world up and running. Until we see wider adoption of these platforms, NAP...
 
 
 
 
 
Expand article

Taking a second look at Rohati

The Article has images
2008-06-19 23:33:04 by HASH0x8b2a3d0 in StillSecure, After All These Years
...ACLs to control access to applications. Where we already have security at the perimeter and at the edge, Rohati is about controlling access at the server/application. The diagram on the left (click on it to get a bigger version), is a good illustration of how Rohati works. By integrating with LDAPs Rohati can assign you an access policy to...
 
 
 
 
 
Expand article

Taking a second look at Rohati

The Article has images
2008-06-20 00:33:04 by ashimmy in StillSecure, After All These Years
...ACLs to control access to applications. Where we already have security at the perimeter and at the edge, Rohati is about controlling access at the server/application. The diagram on the left (click on it to get a bigger version), is a good illustration of how Rohati works. By integrating with LDAPs Rohati can assign you an access policy to...
 
 
 
 
 
Expand article

Setting file ACLs with PowerShell part 4

2007-11-29 09:34:00 by Keith Brown in Security Briefs
 
In part 3 , I walked through the following line of code newRule = New-Object Security.AccessControl.FileSystemAccessRule "keith", Modify, Allow I pointed out how the "Modify" was automatically converted into an enumeration value, promising that I'd talk more about enumerations later. Well, this value comes from the...
 
 
 
 
 
Expand article

Turning on cruise control

2008-01-18 07:26:00 by Keith Brown in Security Briefs
 
...ACLs so the account could move files around and write to CruiseControl logs (which I also moved out of CruiseControl's program directory Once I got ccnet.exe working properly under the low-privilege account, I switched back to using the service, and voila! We now have a functioning installation of CruiseControl
 
 
 
 
 
Expand article

Plan now to eliminate "power users" from your domains

2008-02-11 18:03:17 by Steve Riley in Steve Riley on Security
 
...ACLs. We recommend that you do the same More details in these blog postings Power Users are Admins who have not made themselves Admin yet, by Jesper Johannson The power in Power Users, by Mark Russinovich
 
 
 
 
 
Expand article

How the MPAA Might Enforce Copyright on the Internet

2008-02-11 13:24:03 by schneier in Schneier on Security
 
...ACLs which block all pairs that cross its network, killing all traffic for that torrent on the ISP's network. By continuing to spider the Torrent, the MPAA can find new users as they are added and dropped, updating the map to the ISP in near-real-time Note that this requires no wiretapping, and nicely minimizes false positives Debate on idea...
 
 
 
 
 
Expand article

Can ACLs and NAC mix for security success?

2008-04-28 00:00:00 by Joel Snyder in Network World on Security