How to use Authselect to configure PAM in Fedora Linux

Authselect is a utility tool that manages PAM configurations using profiles. Starting with Fedora 36, Authselect became a hard requirement for configuring PAM. In this article, you will learn how to configure PAM using Authselect. Introduction. Unauthorized access is a critical risk factor in computer security. Cybercriminals engage in data theft, cyber-jacking, crypto-jacking, phishing, and […]

MYIR Launches Sub-$100 i.MX 91 Board for Embedded and Industrial Use

MYIR has introduced the MYC-LMX91, a compact SoM powered by NXP’s energy-efficient i.MX 91 processor. Designed for smart devices, the module targets applications such as industrial gateways, EV chargers, smart home systems, medical platforms, and building automation. The MYC-LMX91 is built around the 1.4 GHz Arm Cortex-A55-based i.MX 91 (MIMX9131CVVXJAA) and comes equipped with 1GB […]

Linux 6.16 GPU Driver Changes Land: NVIDIA Blackwell, Asahi UAPI, Intel Xe Fan Speeds

The hearty set of Direct Rendering Manager (DRM) kernel graphics/display driver changes were merged today for the in-development Linux 6.16 kernel. Most notable is preliminary NVIDIA Blackwell and Hopper GPU support atop the mainline kernel with an open-source driver but there are also big ticket items added for the AMD Radeon/Instinct and Intel graphics drivers too as well as the other smaller drivers…

[$] Glibc project revisits infrastructure security

The GNU C Library
(glibc) is the core C library for most Linux distributions, so it is a
crucial part of the open-source ecosystem—and an attractive
target for any attackers looking to carry out supply-chain
attacks. With that being the case, securing the project’s
infrastructure using industry best practices and improving the
security of its development practices are a frequent topic among glibc
developers. A recent discussion suggests that improvements are not
happening as quickly as some would like.

[$] System-wide encrypted DNS

The increasing sophistication of attackers has organizations
realizing that perimeter-based security models are inadequate. Many
are planning to transition their internal networks to a zero-trust
architecture
. This requires every communication on the network to
be encrypted, authenticated, and authorized. This can be achieved in
applications and services by using modern communication
protocols. However, the world still depends on Domain Name System
(DNS) services where encryption, while possible, is far from being the
industry standard. To address this we, as part of a working group at
Red Hat, worked on fully integrating encrypted DNS for Linux
systems—not only while the system is running but also during the
installation and boot process, including support for a custom
certificate chain in the initial ramdisk. This integration is now
available in CentOS Stream 9, 10, and the upcoming
Fedora 43 release.

AVX-512 Performance + Power Efficiency Shines With AMD Strix Halo

Several weeks into testing the AMD Ryzen AI MAX+ PRO 395 flagship “Strix Halo” SoC within the HP ZBook Ultra G1a, I continue to be very impressed with its performance capabilities for a wide range of workloads. While the Radeon 8060S integrated graphics easily turn heads and the 16-core / 32-thread Zen 5 cores deliver incredible performance in a laptop form factor, one feature not to be discounted that together really helps make this laptop/SFF SoC an excellent choice for AI use and other scientific computing purposes is the presence of AVX-512. While Intel’s current laptop and desktop processors lack AVX-512, Zen 5’s efficient AVX-512 implementation does wonders for the Strix Halo performance and power efficiency. Today’s article is exploring the performance and power efficiency benefits of AVX-512 usage on the AMD Ryzen AI MAX+ PRO SoC.

OpenSnitch: The Must-Have Application Firewall for Linux

When it comes to protecting your Linux system from unwanted network connections, having a good firewall is essential. While most Linux users rely on traditional firewalls like iptables, firewalls, or ufw, these usually work at the network level and don’t give detailed control over which applications can connect to the internet.

This is where OpenSnitch comes in, a GNU/Linux application firewall designed to give you control over your outgoing connections on a per-application basis.

In this article, we will explore what OpenSnitch is, how it helps secure your Linux machine, and guide you through simple installation and usage steps.

The post OpenSnitch: The Must-Have Application Firewall for Linux appeared first on Linux Today.