Security Team

From openSUSE

The SUSE Security Team takes care of the security of the Linux products, both the retail products (SUSE Linux) and enterprise products (SUSE Linux Enterprise Server, Novell Linux Desktop, Open Enterprise Server).

Members

• Thomas Biege
• Ludwig Nussel
• Sebastian Krahmer
• Marcus Meißner

We work in following large areas:

• Reactive work
  Thats what you see as security updates. We monitor mailinglist, coordinate between vendors, check software releases, and receive reports and drive the security update process of the SUSE Linux based products during their lifetime. This is summarized as incident handling.
  Our Novell security page can be found here: http://www.novell.com/linux/security/securitysupport.html
  If you want to report an incident, mail security@suse.de ... Our GPG key is on every CD 1 and on the keyservers.
• Proactive work
  We regulary check packages contained in our Linux distributions. We focus on security critical packages, network daemons, setuid programs and similar. We work on Security Features.
  We also try to replace security critical daemons or setuid binaries by technologies less prone to attacks.
• Research
  We research security related technologies.