of Germany. We are also joined by Dr. Harik Algurg, CEO and Vice-Chairman of Dubai Curse, who is joining us in person. We have also Nicolas Mayenkort, CEO of DreamLab, but also we are joined by Kerstin Jutner, Liaison Officer Roder Schwarz, Maria Janowy Lovic, from SAFE Online Director and Violence Global Partnership, Elisabeth von Glenn, Policy Advisor at GIZ, Government of Germany, but all today representing the Equals partnership, as well as René Arnold, Vice-President of the Public Affairs Strategy at Huawei, who is with us here physically, but also who is supported and who will be introducing intervention by Ms. Vicky Tsang, Vice-President of Corporate Communications, Chief Editorial Department by Huawei Technologies Co-LTD. And we will be also joined today virtually by his Excellency Tadej Rupel, Ambassador, National Coordinator for External Aspects of Digitalization, AI Cybersecurity at the Ministry of Foreign Affairs of the Republic of Slovenia. So welcome to the stage and let's start the presentation of the pledges. I remind that the time for the presentation is short. You have three minutes to make your pledge and the first I would like to invite to make the presentation his Excellency Tadej Rupel, Ambassador, National Coordinator for External Aspects of Digitalization, AI and Cybersecurity from Slovenia. Over to you. Thank you so much. Excellency's distinguished partner to connect digital coalition members. It's my great pleasure to join today's celebration of achievements and implementation of connectivity projects around the world on behalf of Slovenia. Connectivity is shaping the quality of our lives on a daily basis. They are imperative for education, work, services, and meaningful participation. It is therefore crucial to take decisive steps to ensure accessible, inclusive, safe, secure, and sustainable connectivity for all. We are delighted to be part of the digital coalition that mobilize a variety of partners from governments, private sector, and civil society in order to connect the unconnected. This year Slovenia celebrates 30th anniversary of its membership in the ITU. In three decades we have come a long way to connect our citizens and to develop a resilient and inclusive ICT ecosystem. We therefore stands ready to share our knowledge and best practices to bridge the digital divide globally. After first pledges made by our Minister of Digital Transformation and the World Telecommunication Development Conference in Kigali, I have the honor to present a new joint pledge today. Slovenia, France, and Montenegro pledge to establish the Western Balkans Cyber Capacity Center. We observe with concern how multiple cyber incidents such as the recent ones in Montenegro, Albania, Bosnia, and Herzegovina expose the vulnerability of countries to cyber attacks and cyber crime. We therefore decided to join forces in order to enhance cyber resilience of the Western Balkan region through cooperation, training, and capacity building. We then aim to contribute to the global efforts for peace and stability in cyberspace. The regional center will cover three aspects of operational aspect training, expert training, cyber security, fight against cyber crime and cyber diplomacy. Exchange of information and good practices and training courses will aim to strengthen the cyber culture, develop the expertise of active practitioners, and create a regional cooperation network. The center will also aim to introduce cyber curricula at the universities of the region through the cooperation with the academic institutions from Slovenia and France. The center based in Podgorica, Montenegro enjoys great support from all Western Balkans countries and we are looking forward to work in synergy with other partners, institutions, organizations, and international cyber capacity building programs to increase cyber resilience of the Western Balkan region. Thank you so much. Thank you very much, Excellency, and congratulations on this occasion. We are looking forward to the enhanced capacities of this region, of these several countries, looking forward to your assistance through this action. So thank you very much one more time and now let's move to the next pledge, Bjorn Richter, representing the GIZ today. Thank you very much and I think that's also the spirit of the PTC since the beginning of this year, maybe to interlink also the pledges. Thanks for the announcement of His Excellency, Mr Ruppel. I think I can shortly call on him and say we have just got the support of the foreign office of Germany to work in exactly this area. We would like to strengthen this regional center with you on the lead, so much appreciated. And I think this is the spirit that Doreen and the PTC has really set up and 28 million US dollars is quite an enormous amount that you brought together. So I really gear up for everybody to meet the 30 billion US dollars by the end of the day. I understood it's still something lacking and we have done our level best to also support this process in the focal area too on local digital ecosystems. I think last week we had a fantastic milestone also for the cooperation between ITU and the partners of the digital ecosystem in Germany. We had the launch of the network of the digital global network that our minister Schultz has championed to showcase that digital transformation and particular fair and human-centered digital transformation is at the core of the international digital policy strategy of Germany. So that allowed us already to pledge to this audience the GovStack support. I think I just want to remind you that we have geared up the announcement of to develop 12 ICT building blocks to reach with digital e-government services, 2 million people. So really to scale this approach and we do this with the ITU but also with DIAL and the government of Estonia together. We would like to further announce our support to the country of Ukraine today. We have supported also during the visas chief information officer exchange with the chief digital officer Maxim on the Ukraine issue and I think we the German government is pledging additional support of 1.2 million euros for GovStack support to Ukraine to not only bring better registries for the recovery of Ukraine but also to enable Ukraine to share its digital public goods with the world. I think that should not be forgotten. They are also leading in a lot of areas on e-government with their e-government services. Last but not least I think the new announcement is really to work together on the area of feminist development policy particular on the area of equals. We were proud partners of equals I think from the first days onwards. We now would like to further this cooperation with the cooperation with Atinki our digital learning platform and equals network. I think tomorrow we will go more in depth but we will pledge we are pledging to reach out more than 500,000 females particular and underserved areas with that digital digital learning platform and we're pledging us all some of 25 million euros on this amount. Thank you so much and thanks for your leadership to read. Thank you very much and this is a real example of the great cooperation spirit and also amazing show of the way how we can bring together different stakeholders working on the similar teams to join forces and scale up the impact. So now let me move to the next pleasure and his excellency Dr. Tariq Al-Gurg as CEO of an vice chairman of Dubai's Curse. So the floor is yours. Thank you very much. Dubai cares we are an education philanthropy based in Dubai and everything we do is within the SDG for context and what links us with P2C we were there from day one with them is to support them from the education angle and as we know out of school youth what they need today is upskilling and without technology we will not be able to do that. ITU is also a strategic partner at the reward summit that we hosted last December at Expo 2020 Dubai where we came with three solutions towards how can we change education. One of them is a the reward global declaration on connectivity for education with UNESCO. Another one P2C also played a role there into identifying their partners as well but the most important thing is the guiding framework that we launched as well during the transforming education summit which guides countries on how to transform education. Our job here is to take IT youth and scaling all together with education to attack solutions in countries around the world and we will put our expertise into climate and education as Dubai cares has been selected not announced yet probably next month but has been selected by the COP28 to be the education content lead everything got to do with climate and education green skills green jobs towards green economies. This is a golden opportunity for all of us to combine efforts and to align our strategies and I would like to read the pledge and as humanity approaches the finish line of the decade of action it is important to recognize that a prosperous and sustainable future for all should not be a distant dream but rather a reality that is achievable through a complete rewiring of education so that it becomes the heart of win-win solutions across all SDGs the transformation of education for people and planet particularly with a view for green skills and jobs as well as green economies will require a whole of society ecosystem approach built on cross-sectoral collaboration and partnerships that leverage the power of connectivity and technology to accelerate progress particularly for those left farthest behind. Dubai cares is committed to supporting countries education transformation agendas to achieve their ambitious ambitions for people and planet through prioritizing and advocating for the vital role of ed tech and connectivity as the main enablers for systems change and human development by 2030 Dubai cares aims to support targeted initiatives that will provide necessary skilling capacity building informed policy and foster cross-sectoral partnerships towards connected technologies and ed tech to benefit over five million children and youth thank you very much right thank you very much for this commitment or strengthening the human capacity and building and now let us move come back from Dubai and we are moving to Switzerland to the dream Nicolas Maincourt CEO of the company thank you so much so we as well we try to address a global pervasive virulent problem actually the cyberspace so in 2022 insurers have reported up until now 8.4 trillion of damages induced through cyber if you put that to a context compared to natural disasters we talk about the 44 so cyber has surpassed tremendously the natural disasters and is imposing a huge challenge to insurers but also the world why is that digitalization is the digital transformation is in full swing and the digital transformation actually connects everybody with everything and everything with everybody it is connecting us globally and it leads to a massive hyper connectivity and this hyper connectivity leads to an exponential growth of public attack surfaces vulnerabilities the result of it we can read every day number of cyber attacks are exploding and pose a major threat to competitiveness national security and democracy now but what is it that cyber thing cyber is the first and only human-made dimension that is intangible invisible inaccessible with sensors for us and at the very same time is all pervasive all permitting in controlling places and controls all daily lives so it has a direct impact on businesses education information trading and the life literally of billions of people it also is a huge opportunity for the whole world we have it in our hands to actually create utopia and it's also a great opportunity of course for africa these new technologies can and will contribute to accelerate overall economic development and will help to better secure governments nations people and can help to prosper and thrive and thrive educational economic prosperity the smartphone is a driver of digitalization and for sure and especially in africa payment systems by mobile phones crop savings are just a few examples so far so good but digitalizations besides the tremendous opportunity and unprecedented opportunities also have a downside and price um this is the bot the bot is digital transformation without a solid cyber security fundamental background um can be very risky can be very costly and we have seen it is actually drastic uh cyber criminality is skyrocketing which brings me to the pledge five seconds oh my god in the P2C program so we pledge uh in the cyber for good uh to introduce a cyber observatory a cyber radar system a cyber radar system that helps nations manage measure their cyberspace in order to understand where are the public attack surfaces where are the vulnerabilities in order to manage those vulnerabilities to bring vulnerability levels down in order to create the hummus for a new economy for a new democracy for a new society to strive and prosper we have uh given the pledge to help five ldc countries for now um this is a good start but we actually want to have a lot more we want to help all the ldc's as a matter of fact the whole african country and the whole world anyway we go step by step um and these five countries that we pledged and committed to we will be doing in this batch and program last but not least i would like to end with a quote from michael jordan talent wins games but teamwork and intelligence win championships let's go for it right thank you very much for this commitment to strengthen the cyber security um capacities it was always told to me if you dream dream big and i think that we felt that you really aim at covering the whole africa so thank you very much for this we're looking forward to the implementation and now let me um move to the our next speaker miss kerstin jettner uh via son officer at the rudder schwarz in germany thank you very much uh dear durin distinguished guest dear team of partner to connect program thank you very much for giving me the opportunity to speak about our two pledges which are really important for rodent schwarz and showing our approaches in the region of africa and to support to bring forward sustainability long-term corporations commitments and education for young people and students before rodent schwarz got involved in p2c program i wouldn't believe that we are able to apply a pledge which would be really fits to the program with the right content in addition to my profession i'm a fitness instructor and i feel like in some of my fitness classes where my students doesn't believe in their capabilities but if we always keep trying very hard we will make it and finally also rodent schwarz kept moving on and we were able to contribute two great pledges which perfectly fit into the p2p program in may 2021 the idea has been created to invest in african universities and to install test labs which includes oscilloscopes signal analyzers power supplies and network analyzers for the purpose of education research and development because education matters and we want to support the young students and people rodent schwarz awarded two universities in africa one in gana kwame nukruma university of science and technology called knust and unb university naziboni and pokina fazo both universities fulfill the criteria of pushing universities with limited budget but also where we saw the potential to positively change current ranking in africa rodent schwarz objectives for such investment and projects are to establish the industry to create partnerships with universities to promote education and research and as well as radio frequency electronics and last but not least to boost technology driven entrepreneurship right now with both universities we have been signing sponsoring agreements with expectations recommendations and commitments for both sites the value of investment for both test labs will be around 1.2 million us dollar we see the big picture of p2c the partnerships and cooperation to close the gap to the digital connectivity and rodent schwarz is very excited to became part of it life is like a fitness class we experience we learn from it and we improve we create trust in ourselves to have the capability to build up strong long-term and sustainable cooperation in our business lives which we are very much looking forward to expand and develop in the future thank you very much great thank you very much for this commitment and the further supporting the building the capacities in africa and beyond and now let me move to our next speaker who will be introducing the other speaker so let me first hand over the floor and to rena ardo ardnolt vice president at the huawei who will be introducing miss viki zank vice president of corporate communication at the hua technologies thank you so much yaroslav and it's my great pleasure to be here in person which viki cannot be unfortunately but let me take this chance and thank you all thank you doreen thank you alex thank you to samir and the whole team of connect to recover for the wonderful event that we had last week in ethiopia which we all feel was a great success and has underlined the engagement that huawei is willing to do as a sector member of itu and now i would like to hand the floor over to viki to do our pledge and show how we can continue this engagement in the future thank you thank you renae dear excellency dear doreen ladies and gentlemen it's a great pleasure to be here to on behalf of huawei for over 30 years it has been huawei's mission to provide the solutions that connect people around the world in fact our technologies already provide connectivities to 3.5 billion people in more than 170 countries among them more than 60 million people in remote area have been connected by our rural star solutions however we all know that more work need to be done if you want to be true to our goal of leaving no one behind in the journey to a connected and intelligent world the itu's partner to connect initiatives take this mission seriously and today i'm very proud to announce that huawei is making a pledge to partner to connect by 2025 huawei's icd solution will bring connectivity to about 120 million people in remote area from over 80 countries in addition to connectivities we also support inclusive development in the p2c's first partner country cambodian we will work together with the ministry of posts and telecommunications and universities to provide 10 000 training opportunities for cambodians icd professionals in the next five years i also would like to provide an update for itu's connect to recover research computation supported by huawei 10 days ago we just congratulated 15 winning research teams from 22 countries worldwide and we do not stop there we will work together with itu to put some of the project's recommendation into action in canadia in canya a joint pilot project will be launched to foster digital inclusion and support policies that drive connectivity that will also contribute to our p2c pledge so we invite everyone to join us in this speed to build back better thank you for your attention thank you very much miss zang and mr arnold for these pledges and for connecting the people and committing to connecting the people but also providing them the trainings and the skills so thank you very much for that and now we are moving to the our next speaker miss maria manio my man manio lovich uh safe online director and violence global partnership the floris yours thank you so thank you so much um it's wonderful to be here today and witness the energy and commitment to make the world more connected but um as my husband usually says when i speak about my work i usually kill the conversation because i am usually the bear of bad news but the internet of today is not safe it is not safe for many people that we are trying to connect and as digital harms are on the rise we need to make sure that the connectivity we are bringing to the unconnected is not exacerbating their vulnerabilities and also hampering the progress in many areas that we care about as as a group including education health economic growth and so on our disruptive harm research conducted across the 13 countries in southern eastern africa and southeast asia shows that up to 20 percent of internet using children have experienced some form of online sexual abuse only last year so last year alone one in five kids in these 13 countries have experienced some form of online abuse and this is not acceptable um that is why our team at safe online is working to understand how digital connectivity and technologies are impacting and facilitating existing and new forms of abuse especially looking at the worst form of forms of those abuse which is a sexual exploitation of abuse um what we do is we invest in solutions technologies capacities and programs across the world to enable better responses to online abuse against children we also generate data and evidence that is sorely needed both on the trends and threats online but also on how we can better work and how we can understand what works to tackle these threats online we also advocate with governments uh industry private sector and key stakeholders such as yourselves to prioritize child online safety in your policies in your practices budgets as well as business practices and with that i want to say that end violence is super grateful to ITU for having started this initiative because it's so important to connect the unconnected but we also want to thank you for bringing together all these people who can help us make the internet safer for children with that in mind we want to pledge to use the network of 700 partners of end violence partnership as well as our 70 million uh investment portfolio to support the goals of partner to connect by ensuring that as the world is becoming more connected the benefits of the digital connectivity cannot can be enjoyed in a safe way especially for children this will be done by both leveraging our current investments in country capacities new technology tools and high-level policy work as well as our through our new investments in the coming three years where i want to take up the challenge of your own to reach soon to a 30 million for partner to connect but we are committing to invest at least an additional 100 million dollars in the next three years to make safe internet safer for children and for that we will need all of you to contribute and be partnered with us to make this pledge a reality and join our efforts to make the internet safer for kids thank you thank you very much and we are encouraging all to join the forces and also be active in this field which we're really on demand as we understand from your pledge so please join the forces and and now let's move to the next colleague who is representing today the equals elizabeth von glan the floor is yours thank you so much and good afternoon dear colleagues it's such a pleasure for me today to be representing the equals global partnership for gender equality in the digital age that germany is very proud to be a part of on behalf of the equals global partnership and the equals searing committee we are pleased to submit two pledges today one programmatic and one at voxy to partner to connect to highlight our shared focus on universal connectivity and the digital transformation of societies the equals partners pledge to build capacity and to provide access to free gender transformative foundational it skills training and e-mentoring for 1 million women and girls by 2026 this will be done by the her digital skills initiative with the goal of increasing the talent pipeline of girls and young women in technology and stand the program will include will include basic introduction to technological knowledge access to foundational it skills training and equals qualification that equals batch to boost woman's chance to access formal employment in the ICT sector as well as an e-mentoring program and as we heard earlier the germany learning platform a tingy will also contribute here to the skits for girls initiative via the creation of an equals ambassador program the partners also pledge to increase visibility build critical leadership and digital skills as well as provide mentoring and networking opportunities for 10 000 women leaders women leaders and entrepreneurs in the technology sector by 2026 our second pledge focuses on at voxy with the e skills members pledging to work together to bridge the gender digital divide by using resources and efforts aligned with the focus of the areas of partner to connect equals partners individually and collectively over the next five years commit to provide support and assistance to policymakers working on gender responsive technology implement the measurement and evaluation framework for partner programs and initiatives as well as increase public engagement by submitting these pledges equals partners hope to continue and strengthen their work to bridge the gender digital divide making sure that women have equal digital access skills and leadership thank you thank you very much for this pledge and also congratulations to the all winners of the equals awards today and we encourage all to also join the the partnership on this occasion so dear ladies and gentlemen we have also additional pledge coming from mr siva samasun drum and director of policy regulations and markets from the universal and postal union who has sent his pledge via the video so i would like to invite my colleagues to play the video perhaps some distinguished delegates ladies and gentlemen it is a great honor for the upu to participate in the very first partner to connect annual meeting and for me to have this opportunity to speak on behalf of the universal postal union the itu and the upu have a long history and share strong relationship connecting people and ensuring inclusiveness over the centuries the postal network offers a unique critical national infrastructure to facilitate the meaningful connectivity of businesses and citizens and to provide essential governmental commercial and financial services for the sustainable and inclusive development of the communities they serve however according to upu estimates more than 100 000 post offices of the 650 000 worldwide still remain unconnected to the internet putting these benefits at risk in many countries to bridge this gap and to realize the full potential of pause to advance socioeconomic development the upu pledges to meaningfully connect every post office in the world to the internet by 2030 through the connect dot post initiative connect dot post is a building block to advance the digital transformation of the postal network and to foster digital inclusion because connecting post offices is connecting communities closing the digital divide requires leadership and global cooperation the upu is committed to lead this initiative and looks forward to working together with the partner to connect coalition to achieve universal and meaningful connectivity i wish all of you a very productive meeting and my sincere apologies for not being there with you today thank you ladies and gentlemen and this brings us to the end of our session this was only the sample of the pledges which we just received recently we've heard about multimillion commitments multimillion outreach impact and a lot of pledges in the which will be connecting people everywhere and powering communities building digital ecosystem and incentivizing the investment so please don't hesitate to think about your next pledge and use this opportunity as encouragement and to make the pledge and not today but at the latest tomorrow so make this pledge to us today that by tomorrow we see at least the one pledge from each of you it can be personal pledge as well and we really keep you accountable for that so thank you very much for your attention and with this i would like to call for a round of the applause for all our pleasures of course those who are today with us in the room but also those who join us remotely and with this i would like to thank you very much and handing over to our moderator thank you and i would invite all our colleagues to take the seats in the public thank you thank you very much and mr. Yerousta Ponda for that moderation there thank you so excellent so this is really the we're going up to the finishing line now the closing session is is coming up and we'll just give the speakers a few moments our pleasures a few moments to take their seats again this closing session is going to mark the end of the first p2c annual meeting it's going to highlight the key outcomes of the day and we'll present the outlook and the next steps to the coalition in the new year and we'll be inviting you to celebrate the accomplishments that were made in 2022 so joining us for the closing session um will be mr. Fayaz King special advisor the office of the secretary general envoy of technology uh dr. Cosmer Zaba Zaba who will be who is the chief of partnerships for digital development department and the director-elect for the telecommunication development bureau who's also joining us virtually and of course miss Dorian Bogdan-Martin who is here with us physically director of the ITU telecommunication development bureau and secretary general so first of all I would like to ask mr. Fayaz King special advisor for the office of the secretary general envoy and technology for his remarks mr. King the floor is yours thank you thank you so much and a very good afternoon and good morning for those of us on this side of the Atlantic it's been an absolute pleasure and honor to have been part of the partner to connect collision since its inception last year the idea of all of us coming together to support ITU and to support digital connectivity resonates exceptionally well with me and exceptionally well with all of us at the side of Atlantic in my previous role at UNICEF I oversaw Giga a collaboration of UNICEF and ITU where we were working to connect every school to the internet the Giga knot continues doubling from 20 to 40 countries building on the 2.1 million schools already mapped and supporting connectivity of 25 000 schools 10 million students in this next phase they also launching the open source technology center in Barcelona with the headquarters now in Geneva closer to ITU the objective being to honor our pledge that we made last earlier this year of half a billion students being connected to the internet and 2.8 million schools all this by 2030 digital connectivity as we all know plays an important role in people's lives but unfortunately 2.7 billion people are not connected to the internet and the absence of this foundation layer really becomes a challenge and the need for us to actually bridge this digital divide is a reality universal connectivity is at the heart of the United Nations goal to achieve the more open and free and secure digital future for all and it's a key priority in the Secretary General's roadmap for digital cooperation to achieve this roadmap we need to ensure that we do so in a safe affordable and meaningful way we need to connect and adopt a people-centric approach in everything we do leaving no one behind and starting with the most difficult to reach first every opportunity lies within everything that we do we need to take advantage of that our office at the tech envoy supports the partner to connect collision and we'd like to draw focus to four specific issues which we can look at and build on digital public infrastructure which is covered in our digital public goods initiatives data for development which is part of our SDGs data comments which forms a basis of open source and capacity building skill sets very very important a 3.5 million shortage of data scientists around the world we need to bridge that gap if we want to make digital cooperation and connectivity of people to the internet a real reality we will prepare ourselves for the summit of the future in 2024 by working on the global digital compact the technology know how and the capacity building is key for us to deliver data and open software is the lifeblood of the digital economy i'd like to encourage all our partners in the partner to connect to remain firm with their commitments and to push in every direction so that the global digital economy and the global digital compact become one in the same and we connect everybody to the internet in a safe and inclusive manner thank you so much for being partners with us all in this partner to connect thank you thank you very much indeed mr fias king and thank you for taking the time to deliver those remarks i would now like to hand the floor to dr cosmer zava zava chief of partnerships for digital development department and director elect for the telecommunication development bureau who will give us his closing remarks thank you very much indeed thank you very much max for giving me the floor first and foremost i would like to thank all the panelists the pleasures and winners of the ninth equals in tech awards special thanks to dorin for bringing us all together and for launching this important milestone event for the coalition this afternoon um i would like just to say a partner to connect provides us an opportunity for us together to impact all sectors all people without living in a place and no one behind i will entitle my closing remarks as where do we go from here from the telecommunication development bureau side i would like just to let you know that we believe that uh since we are member driven our membership met in june at the world telecommunication development conference and adopted an action plan our membership also met in a book arrest at the plan potential conference so we are expected to be implementing those outcomes the priorities that we get from the membership they have to tell with the partner to connect aims and objectives connectivity is an issue digital transformation is very important enabling environment to pay way for the private sector and industry to invest critical resource mobilization and international cooperation is important and i think this spirit is evident in the partner to connect spirit now i was a bit disappointed by kestin my good friend from rodent schwarz when she started saying i'm a personal trainer i thought she was going to make a personal pledge uh to make sure the ict community is a healthy and run something virtual across the globe but i think the second important thing that i wanted to mention also is that i would envisage us running a number of round tables based on the partner to connect initiative and make sure that we bring countries together and also bring the partners together and we do much making those that played in the area of infrastructure development have a conversation with those that have infrastructure is their priority skills capacity building etc so that our pledges are relevant we will continuously be inviting for pledges i don't think the ketan will ever come down because the challenge before us is a huge when you look at the gaps that we have between regions between people and communities we should always endeavor to pull resources together our next challenge is obviously to record track monitor and the report on the pledges that we made so that the membership knows exactly where we stand the pattern has no way to stand we stand all of us and the coordinated effort is very important for us of course gathering like this on an annual basis is important because then we can check what progress we are making and what pitfalls we would have encountered and how we could counter those challenges and in conclusion i would like to say this is a great opportunity to bring everyone together to connect it and connected and to bring online the remaining 2.7 people to deliver skills for all to create an enabling environment of course for industry and private sector to play their role academia as well and to strive to make our cities affordable our latest effects and figures released about a week ago pointed to the fact that i cities are becoming more affordable and we applauded that but not more affordable to everyone in the world those in the least developed countries still encounter high costs and that's an impediment for them to come online and we would like to encourage of course our regulators policy makers to take measures to make sure that and industry as well to make sure that the devices and the services are continuously getting affordable we are for win-win partnerships and the partner to connect is our visa to invest our meaningful connectivity with one peoples and one shared vision and with this i thank you thank you very much indeed Dr. Cosmer Zava Zava for those words of encouragement and and that commitment to further the cause i would now like to give the floor to Mr. Warren Bogdan Martin the proponent of partner to connect for who has been the most enthusiastic person i've ever met with regards to this particular venture it's from the get go and as she needs no introduction but i'll tell you again just in case you missed it she's director of the international telecommunication telecommunication development bureau and of course she will be secretary general on january the first of it thank you very much Dorian Bogdan Martin the floor is yours thank you thank you so much uh max and thank you as well to uh to faiz to cosmos nice to see you see you both uh ladies and gentlemen what a day oh max it's been a big day and we're coming to the end of our our first but not last this is just the beginning our first annual partner to connect meeting i hope today was informative i hope it was enriching i hope it challenged you a bit i hope it was energizing i hope as max requested you made some new friends you were able to to network build new relationships and also perhaps broker some some new partnerships i also hope that you were able to join the equals in tech awards ceremony which was i think incredible the the winners that we had this year their their their stories i hope that we can continue building upon that as i said at the opening our first full year of partner to connect i think it has notched up extraordinary results i think they far exceeded our our hopes when we first began brainstorming partner to connect more than a year ago with some of you in in this room and of course faiz was also there in a different capacity at at the beginning we worked closely with the tech envoys office and with ohr lls i think today we raised the bar even even higher my team has has just given me the numbers and on hell since you handed me the paper anything else you want to report okay well i think yarslav granted us permission to go until tomorrow is that right yarslav so so i will i'll share with you the the latest numbers in in just a moment but i think we can we can all be very proud of what we we have accomplished and what i would like to to leave you with today for p2c to truly realize its potential to truly realize its potential as a powerful game changer and we know it can be that powerful powerful game changer we have to keep the momentum going we have to keep that momentum going we do need all hands on deck we need each and every one of you i want to acknowledge our telecommunications development advisory group chair that's with us roxanne we need you to our study group two chair who's just walked in our study group has been looking at digital transformation fadel we need you we need your group and i think flur our study group one chair was with us was with us before and she's looking at the enabling enabling frameworks for universal connectivity we need all hands on deck because our mission is urgent people are counting on us and they they can't wait so we need to double down and get it done next year many of us will participate in the ldc five conference and we heard this morning from the under secretary it was great to hear some of the specific new pledges linked to ldc's she explained to us this morning the importance of connectivity for the ldc's with the focus on the world's most in need countries and economies i think this upcoming conference offers us a unique opportunity for p2c for the community and for the pledgers to come forward and help support access to connectivity in those ldc's it's a unique chance it will help us to directly engage with leaders focusing on the importance of of digital inclusion working together with our target communities governments the private sector civil society academia and ngo's working at the grassroots level to really make make a difference just imagine what we could achieve if we were able to generate the same level of energy and commitment around connecting unconnected at ldc five that we actually saw this year at the wtdc in kigali i would add just imagine how the success of our efforts could constitute a powerful input to connect all people which is the specific stream that faez is is working on in the context of the global digital compact that will be negotiated next year it's with that in mind along with the recognition that p2c needs to be self-sustaining because if we're going to realize the ambitious targets that we have set we need to ensure that it is self-sustaining and that the momentum continues and with that in mind we are putting in place a partner to connect global advisory board the role of of that board will be to provide a solid governance structure and also a financial footing for p2c as we go forward so that we can expand our activities which is key and that we can further raise the profile so that we can attract new partners and new pledgers and to nurture a strong and sustainable p2c community underpinning all of that is the comprehensive online dashboard if you've had the opportunity to check it out that will continue to support regular rigorous and transparent reporting so that we can all make sure that everything stays on track so before I conclude and hand back the floor to max I do want to thank the p2c pledgers especially the the new pledges that have come forward today our partners our focus area leaders our working groups and of course the p2c secretariat that are with us today maybe the p2c secretariat can stand up and be recognized p2c secretariat please we also have some p2c secretariat virtually Anna Sepulveda in particular who wanted to be here but she couldn't so thank you Anna and of course I want to thank the broader ITU team this is a team effort picking up on the Michael Jordan quote it's a it's teamwork because we want to win the championship so if the rest of the ITU team that's in the room if you guys could also stand to be recognized please thank you and there's some shy ones in the back that did not stand but thank you thank you all because it really was it was teamwork and it was a creative innovative group and I'm very grateful grateful to that for that and of course thank thank you all to our virtual participants for being with us I think we still have almost a hundred virtual participants and that's that's a that's a good sign so now I get to tell you the final numbers I'm happy I wouldn't say thrilled thrilled but I am very happy to announce that we have 578 pledges so this morning I mentioned 552 so we're at 578 worth 29 920 million so we're 80 million short for my 30 billion goal and Yaroslav has given us till tomorrow to get to that goal so let's keep going and we have had pledges from 280 entities from 118 countries so I think that's that's really impressive and of course making a pledge is great but it's even more important to implement it so please do talk to your friends talk to your partners we need to bring more more pledges forward so that we can get out there and connect the unconnected with that again thank you all I hope you will join us we're going to have a little reception just outside this room to celebrate because I do think this is an opportunity to celebrate some great accomplishments and achievements and of course I want to wish all of you a very very happy holiday season my best wishes for 2023 Merry Christmas happy Hanukkah or whatever else you you might be celebrating enjoy your families your friends and stay healthy and look forward to welcoming you back in this room in the new year thank you and back to you Max thank you very much Doreen well I think you said it all what a day but also what a year ahead I'm sure given all the pledges and all the pledges to come as well so it just again as Doreen has said we thank every single participant every single speaker every single pleasure for their remarks for their participation for their following this through for their meeting and discussing in the breakout sessions and as I say I think it's been extremely illuminating it's been extremely inspiring and I'm sure that it will continue to to be so and do so next into next year and beyond as Doreen mentioned there are some celebratory reception drinks outside so all of you who are here physically in the room you have earned it so please feel free to partake in that all of those joining us virtually maybe next time but we say certainly look forward to seeing you again Mr King I'm sure that offers open to you to to take a small libation with us next time but anyway as I say this is this is the first annual general meeting and annual meeting I should say of the partner to connect and I'm sure there'll be plenty more so from me Max Jacobson Gonzalez thank you very much indeed for joining us today and we look forward to catching up with you all again very soon thanks very much indeed and goodbye


Good afternoon, ladies and gentlemen. Before taking your questions, I wish to highlight a few points. First, Iran. There is much discussions about the future of the JCPOA. It is not the role of the agency to comment or speculate on the positions of parties through the agreement. We are concentrating on discharging our responsibility, which is to verify and monitor Iran's implementation of its nuclear-related commitments under the JCPOA. As I have said many times, I believe the JCPOA represents a significant gain for verification. The IAEA now has the world's most robust verification regime in place in Iran. We have had access to all locations that we needed to visit. Our inspection work has doubled since 2013. IAEA inspectors now spend 3,000 calendar days per year on the ground in Iran. We have installed some 2,000 tamper-proof seals on nuclear material and equipment. We have carried out more than 60 complementary accesses and visited more than 190 buildings since JCPOA implementation day. We collect and analyze hundreds of thousands of images captured daily by our sophisticated surveillance cameras in Iran. About half of the total number of such images that we collect throughout the world. We collect over a million pieces of open source information each month related to Iran. All of our activities are supported by state-of-the-art technology, including data-collecting and processing systems. Our current verification capability is much stronger than it has ever been. As of today, I can state that Iran is implementing its nuclear-related commitments. It is essential that Iran continues to do so. If the JCPOA were to fail, it would be a great loss for nuclear verification and multilateralism. Second, the most important event in the IAEA calendar this year is our Ministerial Conference on Nuclear Science and Technology, which will take place in Vienna from November 28th to the 30th. The conference will bring together ministers, technical experts, and many others to consider how they can make optimal use of nuclear science and technology in achieving their development goals. The IAEA contributes directly to the achievement of nine of the 17 Sustainable Development Goals. Nuclear science and technology help countries to produce more food, generate more electricity, treat diseases such as cancer, manage their water supplies, and respond to climate change and much more. These will be among the issues discussed at the important conference starting on November 28th in Vienna this year. Thank you very much, and I am happy to take your questions. You said that you do not want to comment or speculate about any party's commitment to the JCPOA. Can you tell us what prompted you to come up with the statement that if the JCPOA fails, it will be a great loss? What are your concerns? Can you elaborate for us a bit? I have said many times that JCPOA is an implementation of nuclear-related commitments by Iran under JCPOA is a significant gain for verification. Therefore, if it were to fail, it means a significant loss. It is a logical consequence. What I mean is what prompted you to make this statement? Can you specify for us specifically if you have any concerns concerning the US administration's comments or actions? The basis for my comment is my understanding that JCPOA is a significant gain for verification. Speaking more specifically about the recent comments by the US administration and President Donald Trump, he signaled out several areas of the JCPOA that he is unhappy with, and he has mentioned inspections specifically. What is your understanding of what the US administration believes can be improved, or your position on whether there can be any change to how inspections are carried out under the deal? I cannot comment on the US position, but I can explain my position on the IAEA. That is why I said that I expect to spend 3,000 days in Iran. We collect hundreds of thousands of images in Iran. We collect 1 million items from open source, and we had more than 60 locations and more than 190 buildings. What I said is that we can state that our verification regime and verification activities are very robust. How to perceive it? It's a matter of other countries, and I cannot comment. Thank you, Mr. Ramano. As you have said several times, Iran has been implementing its commitments under the JCPOA. While at the same time you say that you cannot say that Iran is complying with the JCPOA, are you making a kind of distinction between nuclear commitments and other parts of the JCPOA, or somehow you are siding with the US narrative on this regard? I do not mean that I am commenting other issues than nuclear. It is not the mandate of the IAEA, and I stay within my mandate. So my comment is always related to nuclear-related activities. Why do I say then Iran is implementing the commitments, but I do not say Iran is complying with the JCPOA? The reason is very simple. IAEA is not a party to the JCPOA. In any agreement or legal agreement, the one that is not a party to the agreement does not have the authority to pass judgment whether some party is in compliance or not. However, we are given the task of monitoring and verifying the implementation of commitments by Iran. So I discharged my responsibility and I expressed my observation. I want to change the focus to DPRK. You still remain very concerned. During the Winter Olympic period, they had been somewhat on the surface of the political side. It seems that a bit of a deterrent atmosphere was being displayed. But during those time, did you see any sort of good will from the side of DPRK in terms of the nuclear activities? Had it been changed at all or what was the situation during that time? And also, how do you view that sort of situation at the moment? Thank you. I was watching Winter Olympics, but IAEA was not observing and monitoring Winter Olympics. We kept on monitoring the nuclear program of North Korea, mainly through satellite imagery, and we have not seen any change. Thank you. My name is Tsuchiya from Kyoto News. I'd like to ask about the questions relating to Japan. It's been almost seven years since the huge earthquake and the accident in the Fukushima nuclear power plant. So let me seek your comment on the IAEA's efforts on the field of nuclear safety and its achievement. Fukushima Daiichi accident seven years ago was a huge accident caused by tsunami. We have learned a lot from this accident. Just after the Fukushima Daiichi accident, we have organized a ministerial conference followed by the decision of a general conference on the action plan. The action plan has been implemented and IAEA safety standards have been updated. Many countries also conducted so-called stress tests and when needed, they upgraded the safety features. Since the Fukushima Daiichi accident, a lot of improvement has been made in the area of nuclear safety. Japan has kept on providing the information to us and we have been updated and we have uploaded these pieces of information with our comments. Also, we have been helping Fukushima and for example, we have helped them to ensure the quality of seawater monitoring and we will continue to undertake these activities. I continue to believe that safety is very important and safety culture must be strengthened all the time. Just a follow-up to the DPRK. You said that it hasn't changed. What does that mean? Does it mean that it appears that they are continuing their development or what does it mean that it hasn't changed? We continue to monitor and we do not see changes but with respect to the specific information, we will update the Board of Governors members when needed.


Hi everyone, I'm Mikael San. I work for the French Network and Information Security Agency. And this talk is about landlock. I talked about landlock last year, so I will not go through all the details of the implementations, but I will focus my talk on the file system access control, which is pretty different than other LSM. The first part is a quick recap of why landlock, what it is, and how it works. And the second part is dedicated to the file system part. So this talk is about the eight series of the batteries, which was sent in February. So there's no more new series from now, but soon. And so let's start with the first part. Landlock's first design, well, the thread is to mitigate bug exploitation or bug door in applications. The application may be server-side or client-side. This may be, for example, a text editor or a web server. Here we want to protect the user of the application against unattended accesses from these applications to the user resources. So really, we want to slow down an attack. There's many important features provided by landlock. The first one is to empower any developer of applications to be able to create tailored security policy for their needs. So some use cases. For example, this may be used to create a security model which fits best your application. It is also useful to emit the security in your application. This way, it is easier when you update your applications to update as well the security which is tied to the application. And then, for example, it may be useful for the user to have only one configuration file which integrates the features of your application and some security properties too. Another one important feature is the ability to compose different access control on the same system. For example, on an end user computer, you may find a system administrator which wants to enforce some security policy. Also, one on multiple end users which may want to isolate their activities. And also, well, the applications the user is using which may want to send back the application to make them more secure, which is, for example, the case for some web users. It may also be useful for multiple cloud services which may have multiple clients. Another important feature is the ability to update if it is deemed necessary the access control on the fly. This may be really useful, for example, to implement some Power Box support on your application. So this Power Box means an ability for a sandbox application to access resources outside of the sandbox. It may be seen for an end user as a fire picker, for example. You may find such Power Box in Mac OS, Android, or even on Linux with a flat pack or snappy, which may have other names like Pottles. And another example may be to update a security policy according to some external factors, like, for example, user behavior or application behavior changes, or, for example, the time, for example, office hours or things like that. Let's first start with simple dimension. So here we are submitting a web server. So there is multiple paths which should be accessible in a read-only way and some which need to be accessible in a read and write way. For example, a slash public, which contains the most of the web files, slash tc, slash resa, and the slash tmp, which should be accessible in a read and write way. So here I will not launch a web server, but instead we launch a shell, which is easier for the demonstration. So we are in the slash public directory. So you can see there's multiple files in here, not really web ones, but now there's one web file. So I created an index.html file. And then I will launch a user applications, which is a sandbox helper, which takes multiple arguments. The first one is a list of paths which should be accessible in a read-only way. And the second one is a list of paths which should be accessible in a read and write way. The other one helper here is called lanoc1, and it will launch a binbash. Now we are in the sandbox process. So we are in the shell, but in the sandbox. And we still can list the files in the same directory. However, you may notice that there is some access which are denied. For example, the .dot directory is denied, which is, in fact, the slash directory. And of course, we cannot write on the file now. But we still can go to the TMP directory, see what's inside, and create some files. And still, the slash directory is not accessible. Well, we cannot do a stat on it. And we cannot go into it neither, or even list some other properties. So how does it work? In a nutshell, this diagram gives you the intuition of how it works. Basically, it's pretty similar to how SecComp works, how SecComp can apply a security policy. The first process which one to sandbox itself creates a security policy and load it in the kernel. So this policy is a set of Flunnel programs, which may be triggered for some specific action and can only restrict the process which loaded it. Well, that's the first simple example. So if this process, one to call the open.cisco, access.fi, this set of programs will take a look at this request. And allow or deny the access. Lambda is, well, made with multiple important parts of the Linux kernel. The first one is the Linux security module framework, which provides a way to implement kernel code, which is dedicated to enforce security policy on user space. There's a lot of security hooks, more than 200. The second big part of Flunlock is the use of eBPF. So the extended Becley packet filter is an internal between machine, which is dedicated to run, well, or interpret, safely code by code in the kernel at runtime. You can load it and upload it. It is used mainly nowadays in the network part of the kernel, but also on the tracing part. And some other projects are common. Two really important properties about this Victor machine is that you can call dedicated functions in the kernel, which are dedicated for one type of program. And there is a way to exchange information between two eBPF program and one eBPF program with user space process, so this kind of new IPC. Here, Flunlock brings a set of hooks, which are dedicated to a set of actions for specific kernel objects, for example, files. There's also a set of program, which are in fact eBPF program, but dedicated to Flunlock. This program can be stacked on the Flunlock hooks. And they may be interpreted, triggered when the properties ask to be triggered for a specific action, for example, read, write, or such action. So really here, Flunlock has a new layer of security. It is not meant to replace any LSM, but the goal is to provide a new way to enforce and to secure your application ecosystem. So it is on top, well, it should be used on top of other security modules. A really important part of Flunlock is the ability to be used by entourage processes. So this is quite challenging because it is not the case for other processes, for other LSM. So there's two main challenges here. The first one is to protect resources from the applications which are sandboxed. So for this, a process which wants to sandbox an application needs to be able to retrace this process. So this means that it is not a threat if this process impersonates this process. If the requesting process impersonates the sandbox process, it is already allowed. But there is not only a need to protect user space, also the need to protect the kernel, and especially to prevent information leaks. In fact, an MbPF program should not have access to information, not otherwise accessible to the process requesting the sandboxing. Otherwise, we will have a privilege escalation. Another important aspect is to avoid side channels, which may be, for example, avoided by only interpreted MbPF program after, well, on objects which are viewable by the process which requested the sandboxing. And, of course, after OSLSM. It is a kind of discretionary access control, but not really because it is implemented by the developer. And another important aspect is the need to be able to account kernel resources, which are used by these new access controls. So now let's take a look at the second part, which is dedicated to the file system. So why and how the file system access control is different between LANDAC and OSLSM? First, there is two kind of way to enforce an access control on the file system. First, you may use excellent attributes, which is a way to tag two label files, but you may also only use path. So let's see the first way. The excellent attributes, which are in each files, well, there are metadata, are really interesting because they're native to the kernel, easily accessible and efficient. But for LANDAC, there's some drawbacks. First, well, it is not possible to use excellent attributes to achieve compatibility, to implement different security policies and run them side by side because only one label per file, which means there is mainly one view of the file system by the kernel. For example, if you do little addings, buy amounts, unused namespaces in container, for example, well, the file, which may have different paths, will only have one inode, then only one label. For the infillage parts, well, we need to be able to account which process sandbox security policy. Also, if you want to use excellent attributes, the file system you're using need to support this, which is not the case for every file system. And last but not least, if you want to level a file, you need to be able to write on this file system, which should not be a good thing for intraded users. You don't want a user to be able to write anything on the file system, of course. And for the dynamic parts, well, you may not want to impose persistent labeling on the file system, but may prepare to label on the fly. About the file path, so the other way to enforce an example on the kernel to create an LSM. Well, first, it is really interesting because it is the point of view of the user. So it really reflects the view of what you want to apply in a sense control. But for unlock, there's some drawbacks. First, the composability. Well, for every file access, we need to remember how this file was accessed because you may use bind months, name spaces, and multiple add links. Well, there's a multiple way to access a file, so a multiple path for a file. And for the intraded parts, well, we need to deal with some underlying inode stuff, which may be tricky, like, for example, accessing a file with a partial path. For example, if you're using the open add syscall, you get a file descriptor, and then you add a part, a relative file path. You may also use anonymous inodes to shoot all nine spaces. So this all can be tricky to implement an X control with these constraints. Of course, there's a risk of leaking path information because, well, you cannot assume that the sandboxing process is trusted. If you don't want this process to be able to gather more information, then you should normally have access to. For example, the death of a file or some underlying directory. So the idea we saw a lot is to create a new eBPF map, which is called nigh.map. So you may see a map as an hash map. So most of the time, it is in a way with a key and a value, with multiple entries, with key and values. The idea here is to create a dedicated map to be able to identify an inode and tie an inode with a numberity value, like a label. In practice, this map is filled with file descriptors. But in the map, the file descriptor is not stored, only the inodes, which is referenced by this file descriptor. This way, it is easy to fill the map. But still, to fill a map, you need to first have access to this file, to the file descriptor. Because we deal with inodes, it is quite efficient to match an inode, if an access match a known inode or not. Because it is an eBPF map, it can be updated by user space on the fly if user space wants to keep the map open. Otherwise, it is easy to lock the map. And of course, it is usable by infrared processes because it is, again, an eBPF map feature. So here, we achieve a way to identify an inode and not store any information on the file system. But still, we can account how much memory it takes and which process requested this memory. And as I said before, we are now able to tag any inodes. But this is not tagging the file system, only the files in the memory. The tagging only is taken in memory. So now, let's see another demonstration, which is about deleting an access control on the fly. So here, there is two shell. The first one will be the one which will be sandboxed. And at the bottom, you can see another shell, which will be used to update the sandbox on the fly. So first here, I use a file system, which is dedicated to eBPF to pin either a eBPF program or a eBPF map. But there is also a way to do it. Then, I run almost the same sandboxer we showed before, we seen before. So there's a list of files which are accessible in a read only way and a list of paths which are accessible in a read and write way. But there's also a new path, a new arguments, which say where we should pin the eBPF map. And then we run the shell. So now, we are in the sandbox. And you can see, well, we can still access the files. But you also can see, well, some stuff here are not really great, because there's no mapping between UID and user. So do you know why? We cannot see the root here, and we only see UID0, because something's missing. In fact, well, it is the same for the prompt. There is no username, because two files are missing. First one is ETC Password and ETC Group. So well, we can add them on the fly. Why is it running the sandbox? So here, I call, I launch another helper, which sole purpose is to update, unlock InodMap. And here, to add two paths. So now, without relaunching the sandbox, well, the new access are granted. But of course, if you want to have a nice prompt, you need to exact again a bash, because it is a shell limitation. OK, so let's see how it works. There is two kind, two type of launch program. For now, the first one is dedicated to work through the file system, to work through directory. And the other type of program is dedicated to allow or deny a specific action, a read or write. So the first one here is dedicated to go through the directories and identify a path. So you can see it as a state machine. This program, the FSWORD program, can then pass a state to another one. If it is a file access, here it is a file pick, which the first one is triggered for open, search here and get to get attribute. So mainly read-only accesses. And the other one, which is also an FSPIC, can be chained to the two previous. And this third program will only be triggered for specific write actions. So let's see with some example. We have here at the bottom an eBPF map, which is a free file, free I know, slash tc, slash public, and slash tmp, and a number to evaluate, which is kind of a tag. So if we're working through slash public, slash web, slash index, dot html, well, the first file, which will be seen by the eBPF program, will be the slash directory. So here, the FSWalk is first, well, say the first invocation, interpretation of this program. But because the slash is not in the map, well, it is not known. So nothing happened. Then when we go through the pass, a slash public directory is seen. And this directory is present in the eBPF map. So it matched. And then the FSWalk program can then tag and change its states. Then it can pass its states through a variable in the eBPF context called here cookie. So in this example, it is really a simple one. And it only saved the death of the path. Then there is a web directory. So the web, again, is not referenced by the map. But the FSWalk knows that it was seen before. Well, one of the files was seen before. So we are still in this file hierarchy. And then finally, we reach the index.gstml. So the final target. And the FSPick can look for the state of this chain of programs. And, well, if it is not zero, it can accept it. So again, it is a really simple example to illustrate the way to identify a file. And then this program can allow the access. So this way to identify a pass has many advantages for landlock. The first one is to be completely agnostic to shoot on all namespaces. There is no need for extra information, which are not already available to the requester process. It's easy to account how much resources are used. It is updatable on the fly. Do not rely on string matching, which may introduce a lot of security issues. And, but we can still detect file hierarchies. But there's multiple ways to do it. Here was only an example, a simple one. And also, because it is fully in privilege and fully in user space, it is quite easy to test this kind of security policies. But there's some drawbacks. The first one is, well, the main one is that this pass identification rely on the way that can help those pass name lookup. So mainly, how does it resolve an assembly, the dot or the dot dot dectories? And also, I needed to add a security block to name the data, which is used to record in which pass work we are. So there's some concern from some FCM developers, because this might rely too much on the current pass name lookup implementation, which changes multiple times. But this seems to be quite stable now. So you can take a look at some headers in the FS directory. And well, I think this logic may add change. But right now, it is already viewable, visible to user space, and especially to discretionary access control and also LSM, which may indirectly rely on the way the pass are resolved. And of course, the user-defined queries. So to wrap up, Landlock here is a user-space hardening, which is a problematic way to create security policies and embed them in your applications. And it is designed to be used as, well, it allows entry-level processes to use it. This way, you don't have to have SID binary and so on. So actually, currently, there's around 2,000 single lines of code, which is not much. There's ongoing patches, so you can follow them on the LKML or on my Twitter account. So the main concern right now, I think, is the pass name lookup. But one good thing which is coming, hopefully, is a way to stack multiple LSM, which, of course, will be really useful for Landlock, because distro, which implements, well, which use a Selenux, a Parmo, or other LSM, will then be able to use Landlock as well. So there's multiple future works, just to cite some of them. The audit support, to be able to have any more minimal audit support. But this may be a bit tricky. Of course, to extend the external control to multiple subsystems, like the network and IPC. Maybe to create real capabilities for Landlock. And of course, to have decent library and tools to implement security policy easily. And of course, all this will not be possible without canal developer reviews. So if you want to take a look at Landlock, please do it. Thank you very much. And if you have any questions, I'd be pleased to answer them now. Thanks. Do you have an example of LLMAP that you could show us? Like what the policy looks like? Or is it a binary policy? I can show you an example. So it is a C example. This is one. OK. So I need to go quickly. But mainly, the first unit here is a way to describe some property of a Landlock program, an EBIP program. First, I need to describe the type of this program, which is, for example, an FSB program. Then some options. I will not go through too much deeply into that. The chaining. So which program was chained before? Like we saw in the example, you may have a different program chain and some triggers. So you want this program to be triggered for append, create, and so on actions. And the main program may look like this, but these multiple lines, which are in the update cookie functions. But you can take a look at the code. For example, take a look at Landlock.io, and you'll see a code, the real code. But let's say this program is the one that allows or denies access to a write operation. So it takes the value of the cookie, like we saw before in the chaining operation. It updates the cookie. So if the cookie is 0, well, it will stay 0, except if the iNode, which is here in the context argument, is present in the BPF map. Otherwise, it will increase the cookie. Well, it is a way to identify the file path. Then in this example, I add a mark to the cookie to say, OK, I saw this iNode. And it was in the set of my iNode, which is allowed to be accessible in a right way. And if it is the case, well, I return a low. Otherwise, it is nigh. So that's basically the way right now you can write a policy. So this may not be convenient, but it is really a programmatic way to do it. But of course, you may think about a more easier way to write a policy and still have some programmatic way to do some payloads and custom security policy. And then the following question to that. I seem to have interpreted that you said that you can't match on specificity of file descriptors only of iNodes. Is that right? No. When I, well, so the map add a reference, well, store references to iNode. So if a process want to access a file descriptor, the well, the unlock and the program can see the underlying iNode. So it works. It is an intended goal. But what I was talking about is when you want to fill a map with iNode references, just fill a map with a BPFC score. And as an argument, you use a file descriptor, which reference the iNode you want to put in the map. It is really a simple way and a unique way to fill a map. That's it. So you just need a single reference to the iNode. It's the opposite of what I asked. OK. OK, just one more question here. So other LSMs also use extended attributes. Does your use of them collide in any way? Could you repeat, please? Other LSMs use extended attributes. Does your use collide with those at all, or how do they work? No, well, I don't use extended attributes. I only use the blob for the strict iNode. So for this, well, to be usable with other LSM, I need a way to stack the unlock with a Selenix or a SMAC, for example. So why not is not possible in a clean way? But with the LSM stacking patch series, it will be possible. So I hope it will be upstream soon. OK, we'll move on to the subsystem updates now. Thanks. Thank you.


Hey guys, welcome back to Mill Prep Monday. Today, I am making barbecue chicken and sweet potatoes. You're not gonna want to miss it. So in case you didn't know, my name is Kristen. I am the second sister out of The Six Sisters from SixSistersStuff.com, and today I am going to share with you one of my Mill Prep recipes. Now these recipes are simple, easy, and a perfect way to get you to eat a little bit healthier. Now before I get started, don't forget to push the subscribe button and push that little bell so you'll get all of our notifications on YouTube. Now if you want more Mill Prep ideas, go to that little dot right there. And it will take you to six other recipes that I've been making for my Mill Prep Mondays. All right, so today I'm making barbecue chicken and sweet potatoes. So simple, so easy, and really good for you. If you want the nutrition facts, I'll put them down below in the description for you. All right, guys, let's go make this barbecue chicken and sweet potatoes. All right, before you start, preheat your oven to 375 degrees. Then you're gonna cover your cookie sheet with aluminum foil so cleanup will be so easy. Now for my sweet potatoes, I had three sweet potatoes that I peeled and chopped up into into bite-sized pieces. Next I have my olive oil. I'm gonna put about three tablespoons of olive oil all over my sweet potatoes. Next I'm gonna sprinkle on my garlic salt. For taste, if you don't like garlic salt, go ahead and use just normal salt and pepper. Either one works fine. Then I'm gonna take my spatula and just mix it the best that I can. Now you try not to mess up the foil or put holes in the foil because that kind of defeats the purpose of an easy cleanup. So do it very gently and just try and cover each individual potato with oil. Next I'm gonna get some chicken. I'm gonna use two big chicken breasts here. And I'm just gonna place them right on the side of the sweet potatoes. Now I'm gonna put just a little bit of garlic salt on top of my chicken just because I love garlic salt. But you don't have to do this step. Next you're gonna get your favorite barbecue sauce. Mine is sweet baby rays because I just love how it tastes. Then I'm gonna take either a fork or a spoon and just spread the barbecue sauce out so it's even over the chicken. When you're done with your barbecue sauce, you're gonna take the whole pan and put it in the oven for 20 minutes.  So you're gonna cook it for a total of 40 minutes. Now while I'm waiting for that to cook, I like to set up my individual bowls so I'll be all ready to make my meal prep. Once it's done cooking, be sure to cut open your chicken. Make sure it's cooked all the way through. If it is and the juices are clear, you're good to go.  Then I like to separate my sweet potatoes into fourths and it makes it a lot easier. So I can just put a fourth of the sweet potatoes in each bowl also. Now be sure instead of doing it right out of the oven, make sure you give it a little bit of time to cool off so you don't burn your fingers as you're setting up your meal prep. Now I like to add a little barbecue sauce on the side. The only bad thing about this is I'm gonna heat up my barbecue sauce. I don't mind because I like hot barbecue sauce, but if you don't like that, I suggest putting it in a little cup so you could take it out so you can heat up your meal and then put your barbecue sauce back in. There you have it. Meal prep for the week. I hope you enjoyed this meal prep Monday and don't forget if you haven't done so subscribe to our channel and of course push that little bell so you can get all of our notifications on YouTube. Alright guys. See you later.