Talks about GNU Affero Public License of Proxmox with it's application security concern and security concern against usage.

1. Social Issues in Computing
in
Load Management using Proxmox

2. Who owns the copyright?
●
Institution / University / College / NGO
●
How did we know?
●
There is more...

3. License for the application?
●
'GNU Affero General Public License'
– Key points
– Why is it different from other licenses?
●
Role of GNU/GPL
●
Redistributing is Legal, yes!
But

4. What Proxmox says?
●
Under Section 2 'Grant of Rights' in Proxmox
Copyright License Agreement
– Contributor is a Licensee
– It's non-exclusive, royalty-free
– Right to distribute & modify
●
Patent License
– The community has right to add your
Contribution to their future releases.

5. Application Security Concern
●
RAM allocation
●
Unstable flavor of Linux
●
Undesired behavior of Application
●
Eavesdroppers
●
Screen Freeze

6. Avoiding Leaks
●
Allocate RAM on runtime
●
Old is good sometimes
●
Manage load on existing VM(s)
●
Remote access to smart ones only
●
3Rs repair / reorganize / refresh

7. Security Concern in terms of usage
●
Who does what when and how?
●
High Disk I/O
●
Hampering with existing data
●
How to monitor?
– CCTV, bad option
– Logs, still better

8. Climbing a wall! Build a door instead
●
Defining roles
●
User profiles
●
Give Access Rights
●
Pop alerts when at risk
●
Make it mistake proof

9. Thank you
Any Questions?
Harsh Raj Bhatia 11030121033
Rahul Kaveeshwar 11030121050
Rohit Choudhary 11030121053

10. Social Issues in Computing
in
Load Management using Proxmox
Talk about what our Dissertation was...

11. Who owns the copyright?
●
Institution / University / College / NGO
●
How did we know?
●
There is more...
How ?
The copy of the Virtual Appliance is been submitted to
the university, hence they own the privilege to
redistribut,e modify and run the software OS
&
As submitted copy can be redistributed with monetary
benefits also, we as a team and Proxmox GeBH
would not ask for money because it is royalty-free

12. License for the application?
●
'GNU Affero General Public License'
– Key points
– Why is it different from other licenses?
●
Role of GNU/GPL
●
Redistributing is Legal, yes!
But
Key Points : -
Affero : For Network based Appliances and
Infrastructure
With GPL it's advisory to imbibe AGPL for network
based appliances
However the norms, conditions and rights provided
by GPL are justified but do not comply with AGPL
Difference and GNU/GPL
GPL does not provide clause for Remote
Connections hence AGPL came into being
Redistributing is legal, yes because the copy holds
the same rights, however if it is redistributed without
the license; the previous contributor holds no
responsibility and is not liable for infringement
allegations.

13. What Proxmox says?
●
Under Section 2 'Grant of Rights' in Proxmox
Copyright License Agreement
– Contributor is a Licensee
– It's non-exclusive, royalty-free
– Right to distribute & modify
●
Patent License
– The community has right to add your
Contribution to their future releases.
Explain Proxmox CLA

14. Application Security Concern
●
RAM allocation
●
Unstable flavor of Linux
●
Undesired behavior of Application
●
Eavesdroppers
●
Screen Freeze
Screen Freeze : often the screen freezes due to high
Disk I/O or someone is using the IP mischievously
Undesired : because somehow the application must
be using more resources and putting extra effort,
else the VM is busy finishing some other IP's
demand

15. Avoiding Leaks
●
Allocate RAM on runtime
●
Old is good sometimes
●
Manage load on existing VM(s)
●
Remote access to smart ones only
●
3Rs repair / reorganize / refresh
3Rs :- standard practice of restarting the VM after
runtime allocation
Old is good, sometimes the earlier version of a
distribution which works well and verse is better
than the ones which are traveling in space

16. Security Concern in terms of usage
●
Who does what when and how?
●
High Disk I/O
●
Hampering with existing data
●
How to monitor?
– CCTV, bad option
– Logs, still better

17. Climbing a wall! Build a door instead
●
Defining roles
●
User profiles
●
Give Access Rights
●
Pop alerts when at risk
●
Make it mistake proof
Mistake proof : USB jacks
How in this? Allocate only the smart ones to access
your domain

18. Thank you
Any Questions?
Harsh Raj Bhatia 11030121033
Rahul Kaveeshwar 11030121050
Rohit Choudhary 11030121053