Women have always made a difference in nuclear science. Marie Curie changed the world. She discovered the reactivity. Having the way for breakthroughs in medicine. And Lees Meitner unraveled the mysteries of nuclear fashion. The leading to low-carbon nuclear energy. But their legacy is more than just scientific. Their stories helped women like me. And me. And me. And me. And me. And we believe that we too could be nuclear professionals. And change the world in our own way. The IAEA Maurice Kledoster Curie Fellowship Program. It's helping me get the education I need to reach my goal. The IAEA Lees Meitner Program. It's helping me get the professional skills I need. To reach my goal. And follow in the footsteps of these scientific trailblazers. This would not be possible without generous support of their winners and partners. So consider how you too can help bring more women into the nuclear workforce. Help shape the future of our nuclear sector. And attract the most talented people from all over the world. Because nuclear needs more women to unlock creativity and innovation. And achieve its full potential. To address the world's most challenging issues.


Everybody forced here ripping 2022 slight football hobby six box half case number 29 pick your team See we got Anthony G with the Titans on war dolphins Brian R. Colts Carrie has the Chiefs Charles the Lions Cole Packers two Colts Cole L. Packers Cole P with the Falcons Dan M. Bears Daniel C. Cardinals Giants David D with the Ravens Derwood with the Seahawks Eric W has the Panthers and Texans Jabari with the Browns Jason a vikings Jeffrey H Steelers Jets Jeremy H Eagles Bucks John T. Saints Michael L. Washington more with the Rams Nathan F has the Bengals in the Pats Nathaniel M Broncos Nicholas O Chargers Scott H. Bills Sean M Niners Steve F Cowboys Valerie Raiders and Yehuda with the Jaguars He let's go Let's go. Ah, Shane. Why? Why Shane? Why Shane? I'm confused as to why sup Nathan sup ballon All right. Yo, here we go purple K. Dior to start us off with the Cleveland Browns to 75 premiere level Sweet level sauce sweet sauce silver concourse rookie Alec Pierce Colts Get it sweet sauce Just sweet. No sweet though Phil Sims Giants award winners autograph Haven't seen a Phil Sims one of these before even one of these in select before F1 drivers. I know that one Strong kid. You're we got tie-dye field level Saquon Barkley Dude's a beast Giants at 25 25 at 25 silver rookie Keyonte Ingram Cardinals He's half a Star Wars character illegal Silver snapshots Justin Fields Bears Silver is Alan Robinson Rams Sparks Jersey Cowboys Michael Parsons is 75 Silver concourse rookie Jake Ferguson Cowboys It's a Ritter neon icons Falcons rookie inserts silver concourse rookie Chris Olave Saints Now group breaks are all full for tonight. We just have room for personals after group breaks Well, we got a bunch of breaks listed through Thursday on the website and they filled up fast tonight Fast Been thrown a faster and faster though Got silver sweets level Dante Foreman Panthers Kenny Pickett sweet level rookie Gilliam bills tri-color to 149 It's in there silver rookie Zion Johnson for the Chargers XRC Got silver sensations Lawrence for the Jaguars with a couple of Just a few dings like all over like around where his legs are I'll send a box dapper to the Jags silver Antonio Gibson commanders Tight end one gonna be for the bills Dalton Kincaid 2023 XRC prison redemption There you go bills Concourse maroon jamo lions rookie to 149. Yep And skyler thompson dolphins rookie Jersey Otto to 75 So Kenny Pickett inserts silver concourse rookie Kobe Bryant Seahawks Olave Bay's premier level Got a ballon got blue Aaron Rodgers Packers number to 149 on the premier level silver ramsey rams Ramsey rams Ramsey rams Place for the Jaguar all right place with the dolphins now Yep, it's a dolphin Super Bowl team now, right? It's a dolphin Super Bowl team now, right since uh ramsie's there There's a path for it Silver field level Debo Niners What are you? Oh boy, Shane. What is going on? rock purdy To 49 or to 99 rookie jersey.  Snapshots, rookie is George Pickens Steelers Silver concourse rookie title under bound Ravens That's a good question Let me some cupcakes tricolor Daniel Jones or gaining nickels as Sean calls him even though It's pretty good to 149 giants Silver rookie concourse Jets Garrett Wilson. Yeah, that's that's why I gave that example Steve 75 David Bell Browns It's a rookie jersey auto I eat a lot more cookies than cupcakes. That's for sure That's what I'm saying. I mean, too. Let me a good cupcake though tricolor rookie Uh premiere club level cave on tibitode giants That's a color match two to one ninety nine silver corral or not corral, but colts matt ryan Geez, what am I doing? What are you doing? That was bad.  I'm gonna say brown phenomenon insert lions. Nice camera. Just focus on the damn cards, dude Come on silver friend water Niners Rory just said hot brown even on ice cream, you know what nothing nothing none of the options you said I'm gonna make my own answer Got concourse remember rookie Calvin Austin a third to 149 Steelers silver hynaki commanders silver is sweet level jj watts Cardinals another xrc Is quarterback one Bryce young panthers xrc prison redemption That's uh, I don't do a club level corral and Sutton Broncos to 99 And Alan Lazard to 75 auto for the Packers Blue field level Daniel Jones giants Mr. 49 color match silver scary terry the commanders The station's picket silver is michael pitman jr concourse or the colts About sauce gardener. We've got olave 10 of 10 rookie gold swatches Grants of the saints 10 of 10 on the olave silver concourse rookie Tyler tomson dolphins do a good worry Silver concourse rookie trailing berks titans Yeah, donny's great right now with the shame you couldn't win the u.s. Open Get ridder rookie now. You've got a gino I'm a lot on the liner limer neon green to 49 Seattle color match silver etienne a second zebra. It's a sweet level rookie George Pickens Dude that's clean That's really cool Damn steelers. That's that's fire jeffrey h I have pulled one color wheel out of select That's going into a mag as well silver neon icons olave saints silver zappy on the premier level rookie. Sorry club level rookie a green now jeez Is the fallen diggs to a five buffalo Club level to 99 terry kill auto for the dolphins as well It's gonna go with concave anyway bill's killing it longdale robinson silver concourse seguan giants A watson wants to watch and rookie club level blue stoop connor to 99 jags silver concourse rookie bonito for the broncos neon icons pick in silver field level marquise brown cardinals Can't afford the third field level there a chicose i'm a conqua rookie uh Premier level white for the titans to 35 Burke sweet level silver gino for the seahawks redemption Garrett wilson prism or prime selections prism signatures or jersey auto garret wilson jets Man, we'll just be in a jerk tonight. I guess rookie concourse red is carlactus or the chiefs number to 99 It's not a tough weekend silver to shonda watson browns Got saint brown silver for the uh phenomenon insert lions silver rookie demon clark cowboys Longest pull uh pull mac jones 101 patriots future circle champs here lontae taylor to 75 sparks jersey jared goth lions silver concourse rookie alec pierce cults silver concourse rookie ferguson cowboys tana hillfield level come on Let's keep that nice color coming high nakki on the lime green to 49 commanders Picket sweet level base silver saint brown lions silver saint brown phenomenon lions silver rookie for the lions malcolm rodriguez from our club level nick bosa club level blue one of the niners to 99 scholar thompson again dolphin's rookie jersey out of the 49 with everyone's favorite, uh, level this year That's safe one. I agree with that try color to 199 giants silver concourse lemar jackson ravens All right, is it anonymous that sweet level looks the best this this year Silver field level james connor cardinals. I guess that's a better question All right, there's bucks in here, but with selects sometimes you see other parallels You don't see the the bucks really rookie purple awesome. What a second vikings color match to 75 silver rookie record going to the jets concessing same level. Oh, yeah James cook a cook rook blue rookie auto bills color match He's a beast they need to let him they need to let him work next year Let a good running back play for the bills see what happens. They'll probably be great probably Try color concourse rookie jack sandborn for the bears silver concourse rookie cameron dickard dickard the kicker You think this year's field level is better than last year's That's interesting. No, I don't think so. I don't think so either Silver snapshots rookie george pickin steelers is it because it's horizontal Yeah, three young rookie silver for the seahawks The hop and silver concourse a la vey rookie for the saints $25 apart 2020 field level. Yeah. Yeah, 2020 field level. Yeah, try color rookie hassan haskins titans number 2199 I guess we're not in these boxes say to a base silver dachshund hill rookie for the bangles Mixed in neon icon silver bangles silver de force buckner coles silver concourse seguan giants That nice concourse tie-dye justin fields going to chicago second year six to 25 Silver j jada's going to the vikings here Kenny pick it I take you you don't like select mic. You got silver a sweet level matthew stafford rams You got silver concourse rookie trail on berks for the titans It's a willis field level rookie I Try color chief stick bolton on the club level number two 149 Kenny pick it sweet level rookie silver concourse rookie benito for the broncos I guess I just don't have as pessimistic of a viewpoint. I think they should have tie-dye rookie auto Kenny pick it That's pretty big card right there for jeffrey h again Looks pretty good next to that pickings Big congrats again jeffrey. I just think they should have put snakeskin in select is kept in the prism lava Sweet level blue jonathan taylor coles number two ninety nine silver rookie algear for the falcons It's kind of like if they wanted to put like tie-dye in prison Let's see right to me. I guess it's a gold now Mike white jets Gold number two of ten superval auto giants odis anderson Silver snapshots the fondigs for the bills silvery atorio gibbs and commanders Yeah, I definitely see what you're saying mike. I just I don't have that I guess Negative view of it It's kind of in the middle not good not bad necessarily The 75 olave rookie jersey for the saints. It's kind of like a natural progression of things in a way Some of it not some of it is Things never stay that would stay the way they are right silver to shana watson browns last six last um Box in the half case here the other half next sparks Bill's jersey josh allen That's out of 99 silver concourse trevor loran's jaguars Reese the beast Come on. Come on. There's a silver concourse rookie of bellinger giants 26 year prison 2016 prisons that look pretty awesome. I don't remember you don't member I don't remember silver sweet level lamar jackson 2017 is the last like prison I can like picture my head Red sweet level sauce that red sauce Nice car jets 349 The tyler locket seahawk signatures of 75 silver concourse fields for the bears Silver field level wilkins dolphins Hello kyler gordon tricolor hayden hearse going to the bangles number two 199 Silver concourse rookie kenneth walker the third seattle roger silver loran's phenomenon jaguars silver Conklin jets and see some more heat here. There's a london rookie field level Falcons come on. Had some big cards in this one. Let's see some more mac jones sweet level tricolor to 149 pats Harman silver mccaffrey niners drawn harman the 32 year old rookie Drafted in 2013 by the pats played a lot of the years of the pats and never had a rookie card, apparently Nope, nope, nope concourse maroon russia wilson broncos It's a 149 mr. Unlimited silver colts jonathan taylor He said mr. Unlimited while the uh Snapshots kenneth walker the third seattle followed by drake london falcons rookie jersey auto out of 199 Sam would probably say something uh Yeah, last prism here is rookie blue concourse kair elan bill's color match telling bills did really well here to 199 silver jonathan taylor That is gonna do it I'm gonna recap now All right, so nicer parallels is a gold mic white a zebra a phenomenon's saint brown for the lions relics josh allen chris olave Jared gough rock purdy. It's a nice one for san fran mica parson's autos we got drake london jersey auto There's a tyler locket Otis anderson super cool auto James cook the nice color match scholar tomson jersey auto garret wilson prime selections prism signatures redemption for the jets Tyree kilton 99 for the dolphins Allen was art of 75 packers david bell That's to 75 ricky jersey auto browns scholar tomson again dolphins is 75 on this one and a award winners fill sims There you go. Let's get one. All right xrc's tight end one bills dalton concade qb1 panthers brice young gold rookie swatch chris olave out of 10 10 of 10 for the saints here green Uh club levels the fondeggs bills two of five Say rookie sweet level zebra george pickens The Steelers and tie-dye rookie auto Steelers again kenny picket Bookend 25 of 25 that'll do it for the half case onto number 30. Thank you everybody


and what hurdles have you had to overcome with your actual coaching? As a new coach, a young age, 17, 18, coaching adults was quite scary. I always remember that. Going on to coaching the young children, I was loving it. I was a big boy compared to them and it was I was showing off what I knew and I felt really confident in that arena. But coaching adults was just scary and it wasn't because I was a good tennis player and the adults that I was coaching were beginners and didn't know half as much as I did about tennis but it was scary just speaking to adults. It was something I wasn't used to and everything in life that I do with my coaching and everything else, I try and take myself out of my comfort zone as much as possible and it's the only way that you can progress basically. So yeah, it was scary coaching adults. I did it more and more and eventually it took me six months to get used to it and actually enjoy it and now I love it.  So sometimes with children, the parents are choosing for the children to come along and so you kind of don't always know if it's really their choice. You know you see smiles on their faces and you know that they're enjoying it but for adults they're making that conscious decision to play. So it's nice to be able to give enjoyment to adults as well as juniors.  I've got to coach a load of adults right now or was there something you think you consciously said well I need to do a little bit differently to engage with them a bit better all. Yeah I think so I had the coach that I used I was an assistant coach on the adult program to start off with and the coach that ran the session was very good at having a laugh with the adults and so as I grew in confidence I you know I started to have a bit of a joke around with the adults as well and that straight away kind of eased my worries and gave me a lot more confidence you know as soon as you can be on that level with the adults and have a bit of a laugh you feel like right you've got you've got that connection now and so I you know to sit still to this day I really try and have a good laugh with the with the players to make sure that you know everybody's comfortable. Communication wise I think as well hitting and doing the demonstrations was a good way for me to gain the adults respect because they could see that I was a good player so so the coach that I was working with quite often got me to demonstrate which was a good thing for me because because I could hit the ball well they would see that and be quite impressed and actually listen to me a bit more when I gave them feedback so yeah I think for a good player and a young coach if you want to coach adults hit balls with them as much as possible and that instantly kind of gains their respect. And what are you trying to improve with your coaching now? Becoming even more simple I think you know you touched on it earlier but kind of really becoming efficient with the way that I coach so making demonstrations efficient you know cutting out all of the unnecessary content and just refining it to what the player needs because the less information that you give across the easier it is for them to bring into their game so I'm always working on trying to simplify my approach and you know with the kids there are lots of ways that you can develop let's say the forehand technique but without even saying a word a very simple way is holding a football and getting the child to throw the football from their hip over the net and what that does it encourages a unit turn it encourages getting your left arm across your body and it does all the right things biomechanically without mentioning a single word just get them to throw the ball to get a player to improve their serve technique just get them to throw over arm because it's exactly the same motion so you know there's some basic ways of simplifying things but it's across the board in general I think for me I just want to be even more simple and even more precise and efficient with the way that I coach. And have you learned or where have you learned about this simplicity of explanation helping biomechanics where have you learned that from? So the LTA have got a good long-term association they've got a good system for coaches where coaches that want to be accredited need to collect 15 credits or license points throughout a year to be able to get your accreditation and each of the credits equates to about an hour of CPD and so the LTA provide various courses which you can choose and go on they might be online course they might be face-to-face so going on those every year keeping myself fresh with new content really really helps but also working with lots of different coaches I think it's important for any young coach to spend lots of time with different coaches with different styles so that you can develop your own style you know there are lots of coaches out there that have coached at one club for the whole of their life and you know it's nice for them to have that feeling of being you know loyal to that club but at the same time you're not going to be learning as much from seeing one coach as opposed to seeing lots of different coaches so for me it's yeah spending time with lots of other coaches seeing things being done well and seeing things being done not so well has helped me to shape the way that I coach but yeah lots of training course spending lots of time with other coaches and developing my own through that. So is that one of the key pieces of advice you would give somebody coming into tennis or any other coach any to coach any other sports that is go and watch other coaches doing what they do and finding out whether it's good or bad or indifferent. Definitely spending time with other coaches but I would also say if you can video one of your coaching sessions and watch it back because you will be able to coach yourself you know I've seen myself coach and I hated it because I would always I'd be earning a lot like I am now so I'd be going um I'd hear myself during demonstrations using the same phrase over and over again so I'd try and cut that out I'd be you'd hear yourself trying to talk too much so if you if you can see yourself in action that's the best way to give yourself feedback and to try to improve it or have a friend or you know a peer or one of your colleagues watching you too um feeding back is is a good way to develop. And as you recording your YouTube videos helped with that do you think or? I think it has yeah because um I see myself messing up a lot I see myself and I'm repeating myself a lot um so yeah I think it has. What other piece of advice would you give to a new coach coming into coaching sport? I would say look after your body as I think I mentioned in one of your other um podcasts that it's um being a coach of any sport is is physical and and people when they get into it as youngsters don't realize um that us oldies start to feel the pain and when you get into it um when you get into when you get into coaching and you're 17, 18, 19 years old your body can be put through you know hours on court you you can work seven days a week and not really feel it physically but I'm you know I'm starting to feel aches and pains and getting little injuries and and that sort of thing so making sure that you you know inevitably as a young coach you're probably going to want to do as many hours as you can you're probably going to work six seven days a week and and that's fine as long as you look after your body so you know being flexible and mobile is key I've spent some time recently improving my flexibility and mobility just through um doing kind of mini yoga sessions not from from a youtube video at home um doing going to the gym and working on strength so that longer term I can stay in in coaching because I you know there is a fear that if you get injured as a as a coach that's your livelihood gone um unless you do loads of online stuff um you know like developing courses online and that sort of thing so for me I'm just trying to make my career span last longer through being mobile being able to get around the court and and having longevity yeah so that's another tip I would say yeah I thought that answer you gave for episode four of this podcast which I will put a link to in the show notes I thought your answer was fantastic and it was completely left a field for me I really thought that that could be an answer for the question that I asked lots of other coaches in that episode which was what's the one thing you wish you knew before becoming a coach and I think it's super super important in fact one of my athletes um after lockdown has started doing a bit of coaching on these learned road courses that my running club runs um and with some of the improvements she was complaining to me the other day that her back aches after coaching because sitting in the coaching launch the coaching motorboat that we use the obviously this the steering wheel for it is is fixed and the seat is fixed and it just happened to be like a little bit too far away from one another so you're always trying to find the right position to sit and steer the boat and make sure that you know generally you're coaching a boat which is alongside so obviously steering wheel and the seat are pointing forwards but the boat your coaching is off to the right hand side in this instance usually and how do you twist and steer and do all these different things at the same time so although you know lots of different sports you know so you coach tennis and in order to coach tennis you have to be on court and you're probably doing quite a lot of it to demonstrate etc i do very very little demonstration as a as a rowing coach thank goodness um for for rowing on the water um because i wouldn't i wouldn't be able to do that nowadays um but uh i think it's really it's really uh interesting that coaches have to look after themselves in in lots of different ways so i think that's a really great um really great answer and thanks for sharing that again


Good morning. So we're going to be discussing the Linux integrity subsystem. And the question is what is the, what comprises the Linux integrity subsystem. And it's basically, there's two parts, there's IMA and there's EVM. And then it's dependent on a number of other subsystems, some of which were developed specifically for this use. So the other ones are trusted and encrypted keys. And, and Dimitri upstreamed, he wasn't the first one to attempt it, but his, he upstreamed the MPI library used for signature verification, the MPI library. And of course, the TPM. This, the talk will mainly cover the IMA overview section and the recent developments at the very bottom. And just for completeness, I've included the uses of IMA, IMA measurement to be specific, and the namespacing when we eventually get to namespacing and what the direction will be when we get there. So the goals of the integrity subsystem really have not changed. This is straight from the wiki. And I believe Dave helped define what the goals of the subsystem are. And the goals are to detect if files have been accidentally or maliciously altered, both remotely and locally, to appraise a file's measurement against a good value. Store it as an extended attribute, and to enforce local file integrity. And there's a white paper from Dave with the URL at the bottom. So the goal of detecting if files have been accidentally or maliciously altered correlates to the first IMA measurement. And it's pointless to ask the system if the system has been compromised. If it's been compromised, it can lie to you. So we don't, we need a method without asking the system if it's been compromised. The second and third goals, appraising a file's measurement against a good value and enforcing local file integrity correlate to the IMA appraisal. The good values are either a file hash or a file signature are stored as an extended attribute. And we use a specific key ring to say which keys can be used to verify the file's signature. And as a bonus, Peter Moody had defined IMA audit. And IMA audit augments the audit subsystem with the file hashes that are calculated. It's used to assist in the analytics and forensics, but we'll have a bigger picture of how all of this comes together. But the first thing is instead of hard coding or sprinkling policy throughout the kernel, IMA has a single file which is used to store the policy. And that policy on the left-hand side, you'll see the policy on the right-hand side, the correlating pseudocode, which is the crux of IMA. You collect the measurement, which means you calculate the file hash. You store the measurement in the measurement list, and you appraise the good value based on that file hash that you previously calculated. And you then use the file hash to add audit records. So the reason that I used, this is a simple policy, and the reason that I used this policy is because if you're enforcing the file appraisals on your system and there are no keys or there's no signatures, well, then your system might not work exactly right and it might hang. So by using the Kexec kernel hook as the example, you can try and use IMA appraisal and use the measurement and audit to see what is actually happening without not too much affecting your system. Basically, the worst that will happen in this case is that you won't be able to do a Kexec because there was no signature or no key. So these concepts aren't new concepts. We've had the concept of secure and trusted boot for a while. In secure boot, each stage of booting verifies the signature of the next stage before transferring control of it. And what's included in the next stage might be keys. And on signature verification, the boot fails, which we just said previously. In the case of trusted boot, each stage of booting measures the next stage and adds the measurement to the event log. In the case of IMA, it's called the IMA measurement list and extends the TPM before transferring control to the next stage. So in this diagram, we show what is entailed in order to verify signatures. This is the appraisal, this is the secure boot, the equivalent of extending secure boot to the OS. So in order to verify signatures, we need those signatures. There have been two talks in the past. The first one was given by Stefan Berger and Mehmed Caleb in 2016, an LPC talk. And last year, Matthew Garrett gave a talk on signing Linux executables for fun and security, also at LPC. But the main idea is that we need to be able to distribute file code and file signatures together. And in order to do that, we've modified RPM. And that's been in RPM and upstream for a number of years. And we've tried numerous times to do the same for Debian packages. The first time I did it by modifying the SHA-1, at the time SHA-1 file, SHA-1 sum file, with just including the signatures there. The second attempt was by my colleague, Stefan Berger, who modified the version of tar that they had didn't in the package to install the packages, did not include extended attributes. So he modified the tar to include the extended attributes. And more recently is the mTree version by Matthew to store the file signatures in the mTree. As far as I know, none of these have been upstreamed and are not yet available. So assuming that we have that the files are distributed, packages come with file signatures, there will be different use cases as to who does the signing, who accepts what key. Sometimes you'll want it from the distro. Sometimes you'll want to redo it on your own to limit what can actually run on your system. And you would do that based on re-signing the files for more of a key granularity. So as we said, IMA is based on policy. So the first thing that you need to do is define a policy. The appraisal, which itself should be signed and would only be loaded if the signature verified. So these are a couple of the built-in policies. You have appraised TCB and secure boot. But all of these policies are overwritten by a custom policy that you can define and can load on the system. So digging down even deeper, we now have that we protect the file data. IMA appraisal protects the file data. And we showed that it's based on the file hashes that should be distributed with the packages. But we didn't say how that is protected. How the file metadata, the file signatures and hashes are protected. And that's when we come to EVM. So EVM protects the file metadata based on an HMAC or signature stored in the extended attribute. And the HMAC, normally you would use a trusted key that encrypts and decrypts encrypted key. These are two new key types or these are two separate key types that were developed for this. So once you have the file data and the file metadata, you need to bind the file metadata to the file. And the original way that we did this, since we weren't requiring security ex-adders, but we wanted to protect the security ex-adders. So we tied it to the inode information. And by tying it to the inode information, well, then it's tied to a specific inode on a specific file system. And the only way of getting that information onto the file system was by flashing it or signing it locally on the system. So recently, this past year, there's a new method that's called the Immutable and Portable Signatures from Matthew. Thank you, Matthew. That ties it. We've removed the identifiers, the file system specific identifiers from the HMAC calculation and are now dependent on using the security dot IMA. It's now an accepted, it's there, and we assume that it's being used. So it's not that difficult to include the security IMA and require it. So this is the new way of binding information. And at this point, you can now include EVM signatures in RPM packages. So originally, originally, originally, we had, for mutable files, we have mutable files by definition can't be signed because if they are signed, well, they're not going to work if you change them. So you can't verify the signature on files that are changing. So first files that are changing, we hash them, and in EVM, we use the HMAC to protect them. So this is really an offline protection, and we're dependent on the access control, either on discretionary or mandatory access control, to do the gating and to do the enforcement. So whereas with the mutable files, these are files that aren't changing, these are files, these are your executables, these are your libraries, these are things that you can sign, and it's fine. You can sign them with an IMA signature, you can sign them with the EVM signature, and I assume Matthew will be going through more of that. Originally, the keys to verify these signatures were on the IMA and EVM key rings, and those key rings were created by user space and loaded originally by dry cut onto the key rings. And we want these keys loaded as early as possible in order to, well, first of all, we need to be able to verify the signature. Of the policy itself that's going to be written. And so it needs to be done as early as possible. There's some security implications of using user space key rings, but these are okay if you're doing it and locking them in the NITRAM FS. But the preferred method would be to use the trusted key rings. And the trusted key rings are created by the kernel itself, and the keys are once again loaded by dry cut if you're using dry cut. And if you have a policy, we haven't gotten to how you specify a policy, but if you're using SeLinux and you're defining a policy based on SeLinux labels, well, SeLinux is loaded late. And therefore it's deferred till after the SeLinux policy is loaded, and that would, which is done by system D. So if you're not using SeLinux labels, then, or any other labels that are loaded, policies that are loaded later, then you can still use dry cut to load, to load the policy. The other thing about the EVM and IMA key rings, the trusted EVM and IMA key rings, is that keys that are loaded onto this key ring need to be verified. And they're verified, we're extending the secure signature chain of trust. We have the signature chain of trust from pre-boot, and now post-boot, we're going to pivot that chain of trust to the built-in keys that are signed in the kernel, such as the kernel. And then we have the internal module keys and any other keys that are loaded that are part of the system. So this diagram basically shows that you have the local CA key, and it's used to sign other keys, and it can be used to sign third-party keys. And the question is, how can we get this local CA key onto the built-in key ring in order to verify the keys as they're being added to the IMA key ring? And this is the same goes for EVM. So there are two methods currently. The first method is just like the kernel modules. You build them into the system. This is the simplest. If you're building your own kernel for your own use, then you just build them right in. There is a configuration option so that you don't have to figure out where the dur file is, and you just define where that file is on your configuration. Otherwise, you can just add it to the module's file, the module certs file. The second way is by reserving memory for the key.  So we have a method for inserting a key into the kernel. It's kind of upstream. The initial patches were upstream, but there are a couple more that make it more usable and fix a couple of problems that were found with it. Those have not been upstreamed. And for us, I work with a development group that separate out the people that build the kernels and those that are using the kernels that are built for them. And this is a simple method for them to be able to use test keys on a kernel that is built that's already been built for them. And then once they're ready, they install the real keys before they release. And so they've already tested the kernel and everything is in place. So there's different use cases for being able to embed these keys post-install. Once you've installed the keys, obviously in order to there, you've modified the file, you've modified the kernel image. So you therefore then need to re-sign the kernel image. The third way of being able to verify keys to be able to put them onto the I'm a key ring is not by adding them onto the built in trusted keys, but by adding it to the secondary key ring. And there are out of stream patches that do this. But once again, if we're trying to have pivot the trust of root and if we bring in all the keys from UEFI, for example, then you're trusting everything that has been run up to this point and you might not necessarily want to do this. So from my point of view, this is not the most optimal way of loading keys onto the I'm a key ring. So we saw that we need the signatures. We need the keys. We need a policy. And this is a lot of setup. Unlike I'm a appraisal, we have I'm a measurement. And I'm a measurement for extending this trust to boot to the OS, we only need an I'm a measurement policy. So if you look down below, we've highlighted TCB and that's one of the built in policies. And so all that you would do is start measuring. And even if you measure files that aren't, there's no signatures that are being enforced. So it just works out of the box. And you can define your own policy, your own custom policy. So what happens after you have this measurement list? We said we don't trust necessarily trust the system on which these measurements are being used. So instead of verifying the measurement list on the local machine, there's a way of if you send them to another machine and one that you do trust, well then you can verify those measurements. And those measurements can be then used as part of your analytics. It can augment your existing analytics with the file hashes. And it can also be used for forensics to know what has been run on your system. So when we talk about the I'm a policy, and the sample that I gave you was one rule for the equivalent measuring appraising and auditing the Kexec kernel image. But once we start talking about a full policy, there's a question as to what you want to measure. If you measure too little, then you don't know the integrity of your system. And if you measure too much, well, you can measure everything on the system. And if you're measuring everything, there might be memory pressure because the measurements are being stored in memory. And performance issues that of going out to the TPM. Now we've done a lot to improve the TPM and performance, but these are, so there needs to be a balance as to what you're measuring and what you're not measuring. Some of the new features that are being proposed might not retain the existing security goals that I'm an EVM provide. And you'll hear from other people who are giving talks about these new features that are being submitted. So when we spoke about sending the files to the remote host for verification, and this is done by the attestation server, I'm not going to go through because other people have referred to it, have spoken about attestation. What I do want to say is that there is an IBM, it might have gotten lost with all the talks that we've had this time here in Europe and in North America, that there is an alternative to the Intel TSS. IBM does have an open source attestation client server and an open source TSS. And this is one of the slides from the version that we have, the research version done by my colleague showing the different types of vulnerabilities that are detected. Not having a key, having a bad key, not having a signature and so forth. In terms of the IMA and where it's being used, and when I'm saying IMA in the general, I'm saying IMA and EVM in the general sense, and not specifically measurement or appraisal. They're being used on the host system and in the virtual machine. And the plan is to have the same features running in the namespace, but we still have some issues with how we're going to do this in a general sense, and not for all of the LSMs to go off and do their own thing, and have different ways of starting and enabling namespacing. So when we do get to solve this problem, the IMA will stage the changes, the support into the kernel. It's a major huge undertaking, and we're going to stage it so that the first thing that will get upstreamed, which has the least amount of other file system changes is IMA audit. And the audit subsystem, there's already patches out there, and assuming they are upstreamed, will already provide the container identifier for the audit subsystem. The measurement, on the other hand, requires a policy, and that policy requires virtualizing security FS, and different subsystems are using security FS. So there needs to be a way of only exposing the IMA material within the container and not leaking other information. And lastly, IMA appraisal, that requires even more changes, and those changes are for keyrings, and David mentioned namespacing keyrings. So we're looking forward to seeing that, which brings us up to the new features. So we've already spoken about portable and immutable EVM signatures, and these were done in this past year by Matthew, and the other piece is support for adding other security extended attributes. All of them, initially, it wasn't limited to security extended attributes, but for the time being, because only root can write security extended attributes, we're limiting it to root and to the security ex-adders. We'll have to look in the future as to whether or not we can, if it's possible, to include other ex-adders or other information as well. Okay, so on the first slides we spoke about the IMA policy. The IMA policy was limited to, it started out as a built-in custom policy, and they were replaced by a custom policy. We've recently extended this so that you can build into the kernel a build time IMA policy that persists after loading a custom policy. And then Naina and Tiago will be discussing an architecture-specific policy later. So I think I need to speed up. So we've closed a number of measurement gaps. One of the, actually in this slide, what we're speaking about is Iversion. So in order to be able to detect if a file changed, it required Iversion support in the file system. But that's really only a performance improvement. So instead of requiring Iversion, now if we don't have Iversion support, we just assume the file has changed because we have no way of detecting that. And unlike on the Fuse file system, the Fuse file system also doesn't have Iversion support, but we don't trust Fuse file systems. So the decision was to say if the Fuse file system was an unprivileged mount, we're only going to measure it once because it's untrusted. And when it's a privileged mount, we assume that you have other methods of deciding what you're allowing to be mounted by root on your file system. And so in that case, since we don't have a method of detecting when the file changed, because it doesn't go through the kernel's file system, this is all in user space, we re-measure it every time the file is opened. And there's now discussions as to whether or not we can support some form of file detection of change. And that's an ongoing discussion on the mailing list. So in 416, Demetri reintroduced an IMA specific lock to resolve the outstanding locking problem. And it was there for quite a while, and it caused a deadlock on XFS. And the other major improvement, as I mentioned previously, was TPM performance. And not only, even after we made the change of using the HR timer, other patches have been upstreamed, and now the performance, there's a major performance improvement with the TPM. So that when you extend the TPM, we can have more measurements and not be sitting around, you know, just twiddling our thumbs to wait to do the next measurement. And as I mentioned previously, we disambiguated the IMA audit records so that when namespacing is upstreamed, that it will just work out as it is the IMA audit. We have a new, the LTP tests were refreshed by, I hope I'm pronouncing right, by Peter. And we are working on a standalone version of the IMA test, which will be part of, which can be called out from LTP and XFS tests. That has not been released yet. So we're continuing to close measurement gaps. There are still a number of them out there that we haven't closed. And a number of these topics will be discussed in subsequent talks today. So how can you help by reviewing patches, by participating in new feature discussions, and because when new features come in, the features are being developed from one perspective. And we really need help with other perspectives. So don't be quiet. Please raise your voice if it will affect your perspective of how you're using the subsystem. And help with documentation, help with closing some of the audit gaps would be much appreciated. So a lot of this work, it's not only my work, and it's, there are other people that have helped over the years, especially my colleagues, my new, my current and my past colleagues. And also to all of you for your help and for your support in new features that are being upstreamed. Thank you, Mimi. So maybe we have time for a couple of very quick questions, a bit over time. And I also want to mention there is an email related both for discussion plan during today's lunch. So if you're interested, I guess you will go see Mimi to know where it's happening. So if there are no questions, let's thank Mimi for the talk.


The Jack Benny Program, transcribed and presented by Lucky Strike. In a cigarette, nothing, no nothing beats better taste. And remember... Lucky tastes better. Cleaner, fresher, smoother. Lucky tastes better. Cleaner, fresher, smoother. For Lucky Strike means, lime tobacco, richer tasting, lime tobacco. Lucky tastes better. Cleaner, fresher, smoother. Lucky strike! Lucky strike! This is Don Wilson, friends. I'm sure all you smokers will agree that the one thing you want most from your cigarette is better taste. For after all, nothing. No nothing beats better taste. And Lucky's tastes better. Cleaner, fresher, smoother. Now there are good reasons why. For one thing, Lucky's are made of good tasting tobacco. Tobacco that is fine, light, naturally mild. Yes, LS, MFT. Lucky Strike means fine tobacco. Then Lucky's are made better to taste better. Made round and firm and fully packed to draw freely and smoke evenly. In addition, every pack of Lucky's is extra tightly sealed to bring you Lucky's better taste in all its natural freshness. Just open up a pack and you'll find that every Lucky Strike is as fresh as the day it was made. That's right. Lucky's just naturally have a better taste when they're made and still have that better taste when you smoke them. Because they come to you fresh. So for real deep down smoking enjoyment, be happy. Go Lucky. Get a carton of better tasting, fresher tasting, Lucky Strike. Lucky's tastes better. Cleaner, fresher, smoother. Lucky Strike. Lucky Strike. The Lucky Strike program starring Jack Benny with Mary Livingston, Rochester, Dennis Day, Bob Crosby, and yours truly. Ladies and gentlemen, immediately after this radio show, Jack Benny will do another of his monthly television programs over the CBS Network. But in the meantime, let's go back to last Monday when Jack returned from a successful personal appearance at the Kern Theater in San Francisco. As we look in on Jack, he's at home, going over some mementos of his theater appearance. 7,098. 7,099. What are you doing, boss? Oh, I'm just checking over the number of programs you sold during my engagement in San Francisco. I thought I sold quite a lot of them. Oh, you did, Rochester, and those programs made wonderful souvenirs. They had my biography and pictures of my entire life in them. I know.  No, no, he was my violin teacher, and he had just finished giving me a lesson. But why were you wearing that big floppy hat? That's not a hat. It's my violin. The teacher just broke it over my head. He was very impulsive, you know. Very impulsive, very impulsive. Hello, Polly. I'm glad you're home from the pet shop. Now, Rochester, I hope you put away all the things I brought from San Francisco. I did that this morning. And you do what I told you to do about laying out all my clothes and calling the cleaner to get them? I did that, too. Good. Now, go upstairs and make sure I didn't leave anything in my clothes. Go through the pockets. Again. Oh, you went through the pockets already? Why? It's once with the hands and once with the magnets. Well, never mind. Do it again. You take care of my clothes. I'll answer the door. Hello, Mr. Benny. Oh, hello, Dennis. Welcome home. Well, it's nice being home. Good to see you again. Thanks, kid. I heard it over as soon as I heard you were back. You did? Yeah. Gosh, if I got something to tell you. What, Dennis? What? I'm quitting your show. What's wrong this time? Don't you like the material you get on the program? Oh, I think the lines, they give me a very funny. Well, don't you like the short hours you have to work? Well, they're fine. Well, don't you like the musical arrangements I get you for your songs? I think they're wonderful. And for heaven's sakes, kid, what's the matter? I don't like you. After 14 years, you suddenly found out you don't like me. I didn't like you when I first met you. Look, Dennis, let's drop this silly talk. You can't quit. Well, I'm going to quit. Well, you can't. Your contract still has 41 years more to run. Oh, boy, that's what I like, security. Yeah, yes, security. Now, let me hear the song you're going to do on Sunday's show. Yes, sir, it's called If I Love You a Mountain. It's from my new 20th Century Fox picture. The girl next door, which is 3-D. Oh, your picture, huh, Dennis? See, I didn't know it was 3-D. She's delightful. Oh, quiet. Now, look, let's have you... Hold on a second, Dennis. Hello? Hi, Jack, this is Bob Crosby. Oh, hello, Bob. When did you get home from San Francisco? Oh, who's home? I'm still up here. Well, how come? I thought you were supposed to get back here yesterday. Oh, yeah, but San Francisco has fascinated the boys in the band so much. I can't get them to leave. Well, what's so fascinating to the boys in the band? Well, Remley's absolutely amazed at all the steep hills in San Francisco. What do you mean? Well, it's the first time Frankie's been sober in the city cockey. That, I can believe it. Well, when are you coming home? Tomorrow. I tried to get the fellas to leave here tonight, but Bagby's given a little party. Charlie Bagby, our piano player? Mm-hmm. What kind of party is he giving? Well, it's not exactly a party. He's invited the rest of the band to watch him jump off the Golden Gate Bridge. Now, wait a minute, Bob. I know that Bagby has certain peculiarities. I can understand him wearing gloves when he plays the piano because he doesn't want to leave his fingerprints on anything. I can even understand him not wanting to ever sit in the chair because of the way his uncle died. So why should he want to jump off the Golden Gate Bridge? Oh, he did it yesterday and he liked it. He liked it? Yeah, he thinks those white caps are brew 102. Look, Bob, this is all very funny, but a man doesn't phone long distance just to tell jokes. Now, what do you want? Well, Jack, to tell you the truth, I've run out of money and I need some to get back to Los Angeles. Well, Bob, you don't need any money to get back here.  Jack, a man in my position can't hitchhike. Wait a minute, Bob, wait a minute. Second thought, maybe you shouldn't hitchhike. I'll send you the money. Where are you staying? Uncle Dan's mission. Oh, well, I'll wire it to you. So long, Bob. Bye. Okay, Dennis, let me hear your song. Yes, sir. See, that song sounds great, you know? I don't know what it is, but your voice gets better and better. You know, you're not only one of the best singers That kid gets sillier every day. See, I don't know what to do today. I think... Mr. Barry, it's nearly lunchtime. Would you like me to get you something to eat? No, I'm not hungry, maybe later. Okay, by the way, what happened to Mr. D? He left. Oh, then if we're alone, there's something I want to ask you. What is it? I want to ask you for a raise. Again! Mr. Rochester, you can forget it. I'll answer the door. Hi, Dowl. Hello, Jack. I wasn't expecting you. Well, I didn't intend dropping in, but I wanted to mail this letter and I'm out of stamp. Do you have any left? Oh, sure, they're in the next room. There they are. Thanks. Throw the folder in the way, Sam. Who, uh... Who's the, uh... Why, are you surprised? Who's the letter? Who's the letter to? Uh, my mother. I'm answering one I received from her this morning. Oh, you got a letter from your mother? Yeah, would you like to hear it? Certainly. What does Get Lost Little Sheba have to say? Well, here it is. I'll read it to you. Okay. My darling daughter Mary, just a short note to let you know that all is going well here on the farm. And before I forget, I want to thank you for the lovely Mother's Day gift. Your Aunt Sophie is breaking her engagement with her boyfriend. It's probably just as well. She broke it off. Now she won't have to go and see him on visiting day anymore. That constant kissing through the wire screen made her face look like waffle. Yeah, most women use pancake makeup. She just uses pancake. No other news. No other news except that I hope you saw your Uncle Willie on television last Sunday. He appeared on What's My Line and won $50. See. None of the experts could guess that he was a bum. Well, good for Uncle Willie. He could use the $50. Also, the bottle of Stop F. Incidentally, he could also use... Jack, Jack, please. There's a T.S. Oh, and it's about you. Well, read it. Read it, kid. Okay. Mary. Mary, I read in Variety that Jack really had a successful engagement up at San Francisco and made a lot of money. I am so happy for him because this is what he always wanted.  I know, Jack. We all did. Well, I better be running along now. Wait a minute, Mary. I haven't anything to do this afternoon. Maybe we'll take a walk or something. Well, I'm sorry, but I can't. This is near the end of the season. I've got to go downtown and audition for a summer job. Oh, really? What company? CBS or NBC? MAY. Oh, well, lots of luck, Mary. I hope you get what you want. Goodbye. Bye, Jack. Would you like some lunch now, Mr. Benny? No, I'm still not hungry. Gee, I don't know what to do. I don't know whether to go play golf or just sit around. Well, why don't you just relax and read a book? Well, I've read all my books. Well, you can go to the library and borrow some new ones. Hey, that's a good idea. Rochester, you get the car. No, it's only a short distance. Such a nice day. I'll walk. I'll see you later, Rochester. Goodbye, boys. Goodbye, boss. Oh, say, that reminds me, Rochester. Yes, sir. This afternoon, I want you to give Polly a bath. Again? Yes, again. I'll see you later. It's nice and quiet in the library. Peaceful, too. Oh, there's a librarian. I'll have to see her about getting a card. Yes, sir. Can I help you? Yes, miss. I'd like to join the library. Oh, you'd like to take out a library card? Yes, and the librarian, too. Now, if you want to get a card, you'll have to give me some information. Your name? Jack Benny. Your address? 366 North Camden Drive. Your age? 39. 39? Yes. You haven't worn well, have you? Well, I worry a lot. Well, here's your card, Mr. Benny. Now, as you know, this is a public library, and each book you borrow may be kept free for three weeks. However, for each day after that, we find you two cents. Oh, and if I bring the book back before the three weeks are up, do you give me two cents a day? Of course not. What a racket. Now, where would I find some of the... Oh, Jack! Jack! Oh, Jack, I'm glad you're still here. Oh, Don, how'd you know where I was?  But, Don, I just got here myself. How'd you get here so fast? There's a sportsman quartet, and I rode over here in my MG. Wait a minute. The poor sportsman and you in an MG? Yeah, I was low-man on the totem pole. Well, what was so important that you had to see me now? Well, Jack, the sportsmen have a new number they've rehearsed, and they'd like you to hear it. Now, wait a minute. They can't sing here. This is a library. Certainly not. Let's only take a minute. But, Don, look at that sign. It says, don't talk. Whisper. That's wonderful, Jack. The name of the song is Whispering. Oh, oh. Miss, the name of the song is Whispering. Oh, that's all right. Okay, Don. Take it, fellas. Don, please. It's embarrassing. Yeah, come on, Don. Don, Don, everybody's looking at it. Don, this is embarrassing. Tell the boys to whisper. Okay? Whisper it, fellas. Whisper it! That's a back-old. Much better tasting. That's a back-old. Let's stop this whispering and start shouting. Lutty's I'm a small sell-out. Don, I admire your loyalty to Lutty strikes. But don't you ever have the boys sing another song in a library. Okay, Jack. Well, I'll see you later. So long. Goodbye. Goodbye. I better apologize to the librarian. Miss, I'm awfully sorry about this disturbance. Oh, that's all right. That's the most excitement we've had in this library since we put the Kinsey Report next to Forever Amber. Well, I can imagine, huh? Well, I better go find a book to read. Gee, we must have thousands of books here. Let's see. Here's one. It takes more than talent by Mervyn Leroy. Yeah, I read that. It's very good. Something about me in it, too. I wonder if that's the same Mervyn Leroy that... No, no, I guess not. Here's another one. Return to Paradise by James Michener. Let's see what books they have under adventure. Hey, this book sounds exciting.  Look at all the books on this shelf. They're all devoted to spaceships and interplanetary travel. I think I'll take this one. I flew to Mars in a spaceship. See, that sounds interesting. Maybe I'll sit down here and read it. I flew to Mars in a spaceship, Chapter 1. My new spaceship for the only remaining unexplored planet, Mars. Everything is in readiness for the perilous flight. I waited for my navigator to board ship. The beautiful cavity she boarded said... Hello, Commander. Hello, Tom. As we readied ourselves for the flight, I couldn't help staring at her. She looked so beautiful in a luring in her new low-cut oxygen tank. Tonga, let's make our last-minute check before we blast off into space. All right, Buzz. I'll call the items off. You check them on the charts. Power rockets. Power rockets. Stratosphere speed indicator. Stratosphere speed indicator. Liquified jet fuel. Liquified jet fuel. Buggy whip. Buggy... Wait a minute. What are we doing with a buggy whip on a space rocket? Somebody goofed. The control switch and we were off made us lose consciousness. And when we came to, we were in outer space. As Tonga navigated, I asked her questions. What is the gravitational pull of the Earth now? Zero. And our speed? I have her wide open. 99,000 miles per hour. We should be doing 100,000. I wonder what's slowing us up. You forgot to take the fox tail off the radiator cap. Oh, yes. It cuts our speed, but it's 40. Tonga, wait a minute. Why are you slowing down the ship? There's a man standing up ahead with his hand extended. Oh, yes. Slow it way down. I'll open the hatch door and talk to him. Hey, what are you doing out there? I'm hitchhiking to Los Angeles. Well, good luck. I'm going to Mars, but I'll be back in time for my television show. The crucial moment for landing was at hand. Get the ship in landing position. Landing position achieved. Jettison the ballast. Ballast Jettison. So far, we haven't loused up any of the words. Stop the ship. Old fashioned sound man. We walked around. We were amazed at the weird atmosphere. We saw a strange creature approaching us. There was life on Mars. As it came closer, I nervously gripped my disintegrator gun. Then this creature stopped, opened its mouth and said, Ah, welcome to Mars. We came from Earth. I am Commander Buzz Corey, and this is Tonga. Tonga? Yes. As our spaceship flew over your planet, we didn't see any farms. We have no farms. Well, where do you raise your animals and vegetables? We don't have none. Well, for heaven's sakes, what do you eat? We have plenty. We eat irradiated air, powdered uranium, condensed hydrogen, and simmer on rolls. I could see I would get nowhere with him, so I asked him to take me to his chief.  Differentially, I vowed to him and said, Are you the leader of the Martians? Hey, yes, but I'm quitting your show tomorrow. I stared at this Martian in amazement. Things on Mars had huge, tremendous heads. This one had no head at all. You made a mistake coming here. We tolerate no strangers. But we are friends.   You can't. You can't. You can't. Sir, you'll have to lower your voice. This is a public library. I said lower your voice. This is a library. Oh, I'm terribly sorry. I was reading this book and was carried away. For a while, I was in the 25th century. Then I was mistaken. You certainly do wear well. Thank you. I'll take this book home with me. I'll finish it after I do my television show. Goodbye. Ladies and gentlemen, I'll be back in just a moment to tell you about my television show, which goes on immediately after this program. But first, a word to cigarette smokers. Nothing. No, nothing beats better taste. And remember, Lucky tastes better. Cleaner, fresher, smoother. Lucky tastes better. Cleaner, fresher, smoother. For lucky, strike me. Lime tobacco, Richard tasting. Lime tobacco. Lucky tastes better. Cleaner, fresher, smoother. Lucky strike. Lucky strike. Friends, when it comes to really enjoying a cigarette, remember this. Nothing. No, nothing beats better taste. And lucky tastes better. Cleaner, fresher, smoother. Lucky tastes better because they're actually made better. Made round and firm and fully packed to draw freely and smoke evenly. Then, too, lucky tastes better because they're made of fine tobacco. I guess the whole world knows LSMFT, lucky strike means fine tobacco. Fine, light, naturally mild tobacco with a wonderful aroma and even better taste. So for the real deep down smoking enjoyment of a better tasting cigarette, smoke Lucky Strike. The cigarette that has better taste when it's made and still has that better taste when you smoke it. Yes, next time you buy cigarettes, ask for a carton of better tasting Lucky Strike. Be happy, go lucky, get better taste today. Ladies and gentlemen, my producer is signaling me that I'm a little early. He means I'm a little early for my TV show, which goes on immediately after this radio program. But I'm a little late on this program, so I better say goodbye on radio and in a few seconds I'll say hello on television. Boy, am I a crazy mixed-up kid. Good night, everybody. The Jack Benny program this week was written by Milk Josephsburg, John Tackerberry, Al Gordon, Al Goldman, and produced and transcribed by Hilliard Martin. Be sure to hear The American Way with all its might for Lucky Strike every Thursday over this same station. Salt your newspaper for the time. The Jack Benny program is brought to you by Lucky Strike, product of the American Tobacco Company, America's leading manufacturer of cigarettes. This is the CBS Ready on Upward.