OpenEmbedded/Yocto Project Security Defaults
Do you remember embedded devices with a remote management system with login "admin" and password "admin"? This should not take place in 2024...
In this discussion session, Marta will describe what we currently have as default security policies and the ideal state. The presentation and the following discussion will cover the distro configuration options, users and process permissions, application configuration, and more.
Marta Rybczynska has a network security background and 20 years of experience in Open Source, including 15 years in embedded development. She has been working with embedded operating systems like Linux and various real-time ones, system libraries, and frameworks up to user interfaces. Her specialties are architecture-specific parts of the Linux kernel. In the past, Marta served as Vice-President and treasurer for KDE e.V. She has been involved in various Open Source projects and contributed kernel-related guest articles for LWN.net. In 2021, she founded Syslinbit, an Open Source consulting company. She has experience with presentations at scientific and free software conferences, including LinuxCon, Open Source Summit, Embedded Linux Conference, Akademy, FOSDEM, and FOSS-north.