initial commit

Add all of the initial presentations from my presentations folder. These are mostly the versions of the talks I actually presented in the RaumZeitLabor, but with updated reveal.js version as a submodule. In the future this needs to be touched up and properly exported to a website so I can link this more easily. For now this should suffice.
2 years ago · 385259e787
commit 385259e787
42 changed files with 14457 additions and 0 deletions
--- a/.gitmodules
+++ b/.gitmodules
@ -0,0 +1,4 @@
+[submodule "reveal.js-4.3.1"]
+	path = reveal.js-4.3.1
+	url = https://github.com/hakimel/reveal.js
+	branch = 4.3.1
--- a/README.md
+++ b/README.md
@ -0,0 +1,19 @@
+# RaumZeitLabor Talks by Helix
+
+## Index
+
+### German
+
+- [Passwortmanager](./passwortmanager/) – Sichere Passwörter generieren und speichern.
+- [Arbeitslosigkeit schaffen](./arbeitslosigkeit/) – wie Automatisierung Effizienz im Arbeitsleben möglich macht.
+- [Rechteverwaltung](./rechteverwaltung/) – Berechtigungen, Zugriffsmodelle und MAC in Linux.
+
+#### WIP
+
+- [Internetrecherche](./internetrecherche) – wie man richtig googlet.
+
+## Tech
+
+- written in Markdown
+- made with [reveal-md](https://github.com/webpro/reveal-md)
+  - based on [reveal.js](https://revealjs.com/)
--- a/arbeitslosigkeit/res/is_it_worth_the_time_2x.png
+++ b/arbeitslosigkeit/res/is_it_worth_the_time_2x.png
--- a/arbeitslosigkeit/slides.html
+++ b/arbeitslosigkeit/slides.html
@ -0,0 +1,156 @@
+<!doctype html>
+<html>
+	<head>
+		<meta charset="utf-8">
+		<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
+
+		<title>Automatisierung macht arbeitslos – und das ist gut so!</title>
+
+		<link rel="stylesheet" href="../reveal.js-4.3.1/dist/reset.css">
+		<link rel="stylesheet" href="../reveal.js-4.3.1/dist/reveal.css">
+		<link rel="stylesheet" href="../reveal.js-4.3.1/dist/theme/serif.css">
+
+		<!-- Theme used for syntax highlighted code -->
+		<link rel="stylesheet" href="../reveal.js-4.3.1/plugin/highlight/monokai.css">
+	</head>
+	<body>
+		<div class="reveal">
+			<div class="slides">
+				<section data-markdown data-separator-vertical="----">
+					<textarea data-template>
+### Wie man sich selbst arbeitslos machen kann
+
+oder: arbeite SMART, nicht hart. <!-- .element: class="fragment" data-fragment-index="0" -->
+
+---
+
+## Fachkräftemangel
+
+- eigentlich: Mangel an billigen Fachkräften, die man ausbrennen lassen kann. <!-- .element: class="fragment" data-fragment-index="0" -->
+
+---
+
+## Digitalisierung
+
+- ursprünglich: einscannen <!-- .element: class="fragment" data-fragment-index="0" -->
+- Prozesse, die auf Papier waren, sind jetzt digitales Papier <!-- .element: class="fragment" data-fragment-index="1" -->
+- Umdenken: <!-- .element: class="fragment" data-fragment-index="2" -->
+  - Prozesse hinterfragen
+  - Automatisierung
+  - Organisation.
+
+---
+
+## Arbeitslast und Ausbrennen
+
+Burnout (WHO): <!-- .element: class="fragment" data-fragment-index="0" -->
+
+- Gefühle von Energielosigkeit oder Erschöpfung <!-- .element: class="fragment" data-fragment-index="0" -->
+- Mentale Distanz von Job oder negative Gefühle in Bezug auf die Karriere <!-- .element: class="fragment" data-fragment-index="0" -->
+- reduzierte professionelle Produktivität. <!-- .element: class="fragment" data-fragment-index="0" -->
+
+----
+
+### Etwas weniger ausbrennen
+
+- nicht zu viel auf einmal (Eisenhower-Matrix) <!-- .element: class="fragment" -->
+- Unterbrechungen vermeiden (Timeboxing) <!-- .element: class="fragment" -->
+- Pausen forcieren (Pomodoro) <!-- .element: class="fragment" -->
+- Möglichkeiten des Arbeitgebers nutzen <!-- .element: class="fragment" -->
+- Spaß haben. <!-- .element: class="fragment" -->
+
+---
+
+## Menschliche APIs
+
+- wir haben einen Mitarbeiter, der schiebt Bestellformulare von A nach B <!-- .element: class="fragment" -->
+- wir haben die Bundeswehr, die Faxe digitalisiert <!-- .element: class="fragment" -->
+- "dich kann ich durch ein Shell-Script wegautomatisieren!" <!-- .element: class="fragment" -->
+
+----
+
+### was ist ein API?
+
+- Schnittstelle zwischen 2+ Systemen <!-- .element: class="fragment" -->
+- definierte Austauschformate <!-- .element: class="fragment" -->
+- Automatisierung möglich. <!-- .element: class="fragment" -->
+
+---
+
+## Automatisierung
+
+- spezialisierte Tools <!-- .element: class="fragment" -->
+  - n8n.io, IFTTT, low code / no code
+- Skripte <!-- .element: class="fragment" -->
+  - PowerShell, Bash, Python (z.B. Airflow, Pandas)
+- Backups + Updates, die heilige Zweifaltigkeit <!-- .element: class="fragment" -->
+- DevOps <!-- .element: class="fragment" -->
+  - imperativ: Ansible
+  - deklarativ: Puppet, NixOS.
+
+---
+
+## Organisation
+
+- Dokumentation: Wiki <!-- .element: class="fragment" -->
+  - verlinkte Docs (z.B. Hedgedocs, Pads, Google Docs)
+  - DokuWiki, Bookstack
+  - manuelle Prozesse hier her!
+- Timeboxing! <!-- .element: class="fragment" -->
+  - Mails, Chat, Benachrichtigungen einschränken
+  - "stille Stunde"
+- Ticketsysteme <!-- .element: class="fragment" -->
+  - Verlinkung + Priorisierung
+
+---
+
+## Prozessanalyse
+
+- dokumentieren <!-- .element: class="fragment" -->
+- aufteilen <!-- .element: class="fragment" -->
+- hinterfragen <!-- .element: class="fragment" -->
+- automatisieren. <!-- .element: class="fragment" -->
+
+----
+
+<img class="r-stretch" src="res/is_it_worth_the_time_2x.png">
+
+---
+
+## Austausch mit Leidensgenossen
+
+- Foren (Reddit, ngb, Lemmy) <!-- .element: class="fragment" -->
+- Chats (NTC Slack, Matrix, IRC) <!-- .element: class="fragment" -->
+- Hackerspaces <!-- .element: class="fragment" -->
+- Kollegen und Bekannte. <!-- .element: class="fragment" -->
+
+---
+
+## Das wars.
+
+### Fragen?
+
+- `mailto:helix@tilde.fun`
+- `matrix://@helix:tilde.fun`
+					</textarea>
+				</section>
+			</div>
+		</div>
+
+		<script src="../reveal.js-4.3.1/dist/reveal.js"></script>
+		<script src="../reveal.js-4.3.1/plugin/notes/notes.js"></script>
+		<script src="../reveal.js-4.3.1/plugin/markdown/markdown.js"></script>
+		<script src="../reveal.js-4.3.1/plugin/highlight/highlight.js"></script>
+		<script>
+			// More info about initialization & config:
+			// - https://revealjs.com/initialization/
+			// - https://revealjs.com/config/
+			Reveal.initialize({
+				hash: true,
+
+				// Learn about plugins: https://revealjs.com/plugins/
+				plugins: [ RevealMarkdown, RevealHighlight, RevealNotes ]
+			});
+		</script>
+	</body>
+</html>
--- a/internetrecherche/res/Internetrecherche.vym
+++ b/internetrecherche/res/Internetrecherche.vym
--- a/internetrecherche/res/Tipps-Mindmap.vym
+++ b/internetrecherche/res/Tipps-Mindmap.vym
--- a/internetrecherche/res/cherrytree.png
+++ b/internetrecherche/res/cherrytree.png
--- a/internetrecherche/res/deepweb-shota.png
+++ b/internetrecherche/res/deepweb-shota.png
--- a/internetrecherche/res/geizhals-bdr.png
+++ b/internetrecherche/res/geizhals-bdr.png
--- a/internetrecherche/res/googlescholar-rzl.png
+++ b/internetrecherche/res/googlescholar-rzl.png
--- a/internetrecherche/res/laika.jpg
+++ b/internetrecherche/res/laika.jpg
--- a/internetrecherche/res/laika_orig.jpg
+++ b/internetrecherche/res/laika_orig.jpg
--- a/internetrecherche/res/pocket.png
+++ b/internetrecherche/res/pocket.png
--- a/internetrecherche/res/shodan-siemens.png
+++ b/internetrecherche/res/shodan-siemens.png
--- a/internetrecherche/res/vym-internetrecherche.svg
+++ b/internetrecherche/res/vym-internetrecherche.svg
--- a/internetrecherche/res/vym-tipps-mindmap.svg
+++ b/internetrecherche/res/vym-tipps-mindmap.svg
--- a/internetrecherche/res/vym.png
+++ b/internetrecherche/res/vym.png
--- a/internetrecherche/res/wiki-crunch.png
+++ b/internetrecherche/res/wiki-crunch.png
--- a/internetrecherche/res/wolframalpha-sombrero.png
+++ b/internetrecherche/res/wolframalpha-sombrero.png
--- a/internetrecherche/slides.html
+++ b/internetrecherche/slides.html
@ -0,0 +1,193 @@
+<!doctype html>
+<html>
+	<head>
+		<meta charset="utf-8">
+		<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
+
+		<title>Internetrecherche</title>
+
+		<link rel="stylesheet" href="../reveal.js-4.3.1/dist/reset.css">
+		<link rel="stylesheet" href="../reveal.js-4.3.1/dist/reveal.css">
+		<link rel="stylesheet" href="../reveal.js-4.3.1/dist/theme/serif.css">
+
+		<!-- Theme used for syntax highlighted code -->
+		<link rel="stylesheet" href="../reveal.js-4.3.1/plugin/highlight/monokai.css">
+	</head>
+	<body>
+		<div class="reveal">
+			<div class="slides">
+<!-- begin slides -->
+
+				<section>
+					<img class="stretch plain" src="res/laika.jpg" />
+					<h4>Internetrecherche</h4>
+					<small>
+						<p>CC-BY-SA  2018-08-28  Helix / RaumZeitLabor<br>
+						⏳️ ca. 16 min</p>
+					</small>
+				</section>
+				
+				<section>
+					<h3>Agenda</h3>
+					<ul>
+						<li>Rechercheziele finden</li>
+						<li>Suchmaschinen nutzen</li>
+						<li>Suchergebnisse verwalten</li>
+						<li>Weiterführende Links</li>
+					</ul>
+				</section>
+				
+				<section>
+					<section>
+						<h3>Rechercheziele finden</h3>
+						<ul>
+							<li>Mindmap (z.B. mit Vim oder auf Papier)</li>
+							<li>andere Formulierungen finden</li>
+							<li>Brainstorming</li>
+						</ul>
+					</section>
+					
+					<section>
+						<h3>Mindmaps</h4>
+						<img class="stretch plain" src="res/vym-tipps-mindmap.svg" />
+					</section>
+					
+					<section>
+					  <h3>Neuformulierungen</h3>
+					  <ul>
+							<li>Thesaurus</li>
+							<li>Fremdsprachen-Wörterbuch</li>
+					  </ul>
+					</section>
+					
+					<section>
+						<h3>Brainstorming</h3>
+						<ul>
+							<li>Stift und Papier</li>
+							<li>Ablenkungsfreies Schreiben</li>
+							<li>Keine Quellen nutzen</li>
+						</ul>
+					</section>
+				</section>
+				
+				<section>
+					<section>
+						<h3>Suchmaschinen ausnutzen</h4>
+					</section>
+				
+					<section>
+						<h3>Operatoren</h3>
+						<ul>
+							<li><code>suchbegriff1 -suchbegriff2</code></li>
+							<li><code> suchbegriff filetype:pdf </code></li>
+							<li><code>intitle:suchbegriff</code></li>
+							<li><code>"such be griff"</code></li>
+							<li><code>suchbegriff1 OR suchbegriff2 	</code></li>
+							<li><code>(suchbegriff1 OR suchbegriff2) suchbegriff3</code></li>
+							<li><code>site:example.com</code></li>
+						</ul>
+					</section>
+					
+					<section>
+						<h3>Google – was sonst?</h3>
+						<ul>
+							<li>DuckDuckGo, Qwant, Bing</li>
+							<li>Metasuchmaschinen</li>
+							<li>Vertikale Suchmaschinen</li>
+						</ul>
+					</section>
+				</section>
+				
+				<section>
+					<section>
+						<h3>Vertikale Suchmaschinen</h3>
+					</section>
+					
+					<section>
+						<h3>Wolfram Alpha</h3>
+						<img class="stretch plain" src="res/wolframalpha-sombrero.png" />
+					</section>
+					
+					<section>
+						<h3>Geizhals</h3>
+						<img class="stretch plain" src="res/geizhals-bdr.png" />
+					</section>
+					
+					<section>
+						<h3>Google Scholar</h3>
+						<img class="stretch plain" src="res/googlescholar-rzl.png" />
+					</section>
+					
+					<section>
+						<h3>Shodan</h3>
+						<img class="stretch plain" src="res/shodan-siemens.png" />
+						<small>
+							<p>(Siemens S7 Protokoll)</p>
+						</small>
+					</section>
+					
+					<section>
+						<h3>Deep Web</h3>
+						<img class="stretch plain" src="res/deepweb-shota.png" />
+					</section>
+				</section>
+
+				<section>
+					<section>
+						<h3>Wissensmanagement</h3>
+						<ul>
+							<li>Wikis</li>
+							<li>Gliederungseditoren</li>
+							<li>Lesezeichendienste</li>
+						</ul>
+					</section>
+					
+					<section>
+						<h3>Wikis</h3>
+						<img class="stretch plain" src="res/wiki-crunch.png" />
+					</section>
+					
+					<section>
+						<h3>Gliederungseditoren (Outliner)</h3>
+						<img class="stretch plain" src="res/cherrytree.png" />
+					</section>
+					
+					<section>
+						<h3>Lesezeichendienste</h3>
+						<img class="stretch plain" src="res/pocket.png" />
+					</section>
+				</section>
+
+				<section><!-- sources -->
+					<h4>Quellen / Weiterführende Links</h4>
+					<small>
+						<ul>
+							<li>Wiki-Seite: <a href="https://wiki.crunchweb.eu/de/guide/research">wiki.crunchweb.eu/de/guide/research</a></li>
+							<li>Titelbild: <a target="_blank" href="https://www.flickr.com/photos/ke-dickinson/7159943526">Laika as Sherlock Holmes in Baker Street Station – Y Nakanishi @ flickr</a></li>
+						</ul>
+					</small>
+					<hr />
+					<h3>Danke für's Zuhören!</h3>
+				</section><!-- /sources -->
+
+<!-- end slides -->
+			</div>
+		</div>
+
+		<script src="../reveal.js-4.3.1/dist/reveal.js"></script>
+		<script src="../reveal.js-4.3.1/plugin/notes/notes.js"></script>
+		<script src="../reveal.js-4.3.1/plugin/markdown/markdown.js"></script>
+		<script src="../reveal.js-4.3.1/plugin/highlight/highlight.js"></script>
+		<script>
+			// More info about initialization & config:
+			// - https://revealjs.com/initialization/
+			// - https://revealjs.com/config/
+			Reveal.initialize({
+				hash: true,
+
+				// Learn about plugins: https://revealjs.com/plugins/
+				plugins: [ RevealMarkdown, RevealHighlight, RevealNotes ]
+			});
+		</script>
+	</body>
+</html>
--- a/passwortmanager/res/keepassxc-logo.png
+++ b/passwortmanager/res/keepassxc-logo.png
--- a/passwortmanager/res/keepassxc-screenshot.png
+++ b/passwortmanager/res/keepassxc-screenshot.png
--- a/passwortmanager/res/keys.jpg
+++ b/passwortmanager/res/keys.jpg
--- a/passwortmanager/res/password_strength-1.png
+++ b/passwortmanager/res/password_strength-1.png
--- a/passwortmanager/res/password_strength-2.png
+++ b/passwortmanager/res/password_strength-2.png
--- a/passwortmanager/res/password_strength-3.png
+++ b/passwortmanager/res/password_strength-3.png
--- a/passwortmanager/res/password_strength-4.png
+++ b/passwortmanager/res/password_strength-4.png
--- a/passwortmanager/res/password_strength-5.png
+++ b/passwortmanager/res/password_strength-5.png
--- a/passwortmanager/res/password_strength-6.png
+++ b/passwortmanager/res/password_strength-6.png
--- a/passwortmanager/res/password_strength-7.png
+++ b/passwortmanager/res/password_strength-7.png
--- a/passwortmanager/res/password_strength.xcf
+++ b/passwortmanager/res/password_strength.xcf
--- a/passwortmanager/res/password_strength_de.png
+++ b/passwortmanager/res/password_strength_de.png
--- a/passwortmanager/slides.html
+++ b/passwortmanager/slides.html
@ -0,0 +1,196 @@
+<!doctype html>
+<html>
+	<head>
+		<meta charset="utf-8">
+		<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
+
+		<title>reveal.js</title>
+
+		<link rel="stylesheet" href="../reveal.js-4.3.1/dist/reset.css">
+		<link rel="stylesheet" href="../reveal.js-4.3.1/dist/reveal.css">
+		<link rel="stylesheet" href="../reveal.js-4.3.1/dist/theme/serif.css">
+
+		<!-- Theme used for syntax highlighted code -->
+		<link rel="stylesheet" href="../reveal.js-4.3.1/plugin/highlight/monokai.css">
+	</head>
+	<body>
+		<div class="reveal">
+			<div class="slides">
+<!-- begin slides -->
+
+				<section>
+					<h3>Schlüsselbrett</h3>
+					<img class="stretch plain" src="res/keys.jpg" />
+					<h4>Passwortsicherheit und Passwortmanager</h4>
+					<small>
+						<p>CC-BY-SA 2022-08 Helix/RaumZeitLabor</p>
+						<p>Dauer: ca. 20 min</p>
+					</small>
+				</section>
+				
+				<section>
+					<section>
+						<h3>Was definiert ein sicheres Passwort?</h3>
+						<ul class="fragment">
+							<li>Passwortlänge</li>
+							<li class="fragment">Komplexität / Erratbarkeit</li>
+							<li class="fragment">Merkbarkeit / Übertragbarkeit</li>
+							<li class="fragment">Einzigartigkeit.</li>
+						</ul>
+					</section>
+					
+				</section>
+
+				<section>
+					<h4>Je länger, desto besser</h4>
+					<div class="fragment">
+						<p>aber:</p>
+						<small><p>passwort passwort passwort passwort passwort passwort</p></small>
+					</div>
+				</section>
+					
+				<section>
+					<h4>Komplexität / Erratbarkeit</h4>
+					<p class="fragment">Leicht zu erratende Passwörter:</p>
+					<ul class="fragment">
+						<li>Passwortlisten, Namen, Wörterbücher</li>
+						<li class="fragment">Sequenzen <i>(abcde, 13579)</i></li>
+						<li class="fragment">Wiederholungen <i>(aaa, 111, 131313)</i></li>
+						<li class="fragment">Transformationen <i>(1337$peak)</i></li>
+						<li class="fragment">Tastatur <i>(qwertz, iuhbv, xvlcw)</i></li>
+						<li class="fragment">Jahreszahlen und Kalenderdaten</li>
+					</ul>
+				</section>
+				
+				<section>
+					<section>
+						<h4>Merkbarkeit / Übertragbarkeit</h4>
+					</section>
+
+					<section>
+						<h4>korrekt pferd batterie stapel</h4>
+					</section>
+					
+					<section  data-transition="fade-in">
+						<img class="plain" src="res/password_strength-1.png" />
+					</section>
+					
+					<section data-transition="fade-in">
+						<img class="plain" src="res/password_strength-2.png" />
+					</section>
+					
+					<section data-transition="fade-in">
+						<img class="plain" src="res/password_strength-3.png" />
+					</section>
+					
+					<section data-transition="fade-in">
+						<img class="plain" src="res/password_strength-4.png" />
+					</section>
+					
+					<section data-transition="fade-in">
+						<img class="plain" src="res/password_strength-5.png" />
+					</section>
+					
+					<section data-transition="fade-in">
+						<img class="plain" src="res/password_strength-6.png" />
+					</section>
+					
+					<section data-transition="fade-in">
+						<img class="plain" src="res/password_strength-7.png" />
+					</section>
+				</section>
+				
+				<section>
+					<h4>Einzigartigkeit</h4>
+					<h3>Jedes Passwort nur ein Mal benutzen!</h3>
+				</section>
+				
+				<section>
+					<section>
+						<h3>Passwortmanager</h3>
+					</section>
+					
+					<section>
+						<h4><img class="plain" style="height:1em;margin:0 0 -.15em 0" src="res/keepassxc-logo.png" /> KeePassXC</h4>
+						<ul class="fragment">
+							<li>Frei und Open Source</li>
+							<li class="fragment">für Windows, GNU/Linux, macOS</li>
+							<li class="fragment">Download auf <a target="_blank" href="https://keepassxc.org">keepassxc.org</a></li>
+						</ul>
+					</section>
+					
+					<section>
+						<h4>Screenshot von KeePassXC</h4>
+						<img class="stretch plain" src="res/keepassxc-screenshot.png" />
+					</section>
+					
+					<section>
+						<h4>Wie funktioniert ein Passwortmanager?</h4>
+						<ul class="fragment">
+							<li>Datenbank aller Passwörter</li>
+							<li class="fragment">Verschlüsselt</li>
+							<li class="fragment">Geschützt mit: Masterpasswort, Keyfile, <abbr title="Timed One Time Password">TOTP</abbr></li>
+						</ul>
+					</section>
+				</section>
+				
+				<section>
+					<section>
+						<h3>Tipps zum Umgang mit Passwörtern und Passwort-Datenbanken</h3>
+					</section>
+					
+					<section>
+						<h4>Passwörter</h4>
+						<ul class="fragment">
+							<li>ausreichend lang</li>
+							<li class="fragment">schwer erratbar (von Mensch <i>und</i> Maschine)</li>
+							<li class="fragment">leicht übertragbar <small>wenn es sein muss</small></li>
+							<li class="fragment">nicht mehrfach verwenden!</li>
+						</ul>
+					</section>
+					
+					<section>
+						<h4>Einmalpasswörter</h4>
+						<ul class="fragment">
+							<li>mit Google Authenticator oder FreeOTP generieren</li>
+							<li class="fragment">sichern (Seeds)</li>
+							<li class="fragment">das Gerät nicht verlieren</li>
+						</ul>
+					</section>
+				</section>
+				
+				<section><!-- sources -->
+					<h4>Quellen</h4>
+					<small>
+						<ul>
+							<li>Titelbild: <a target="_blank" href="https://www.flickr.com/photos/ke-dickinson/7159943526">keys – ke-dickinson @ flickr</a></li>
+							<li><a target="_blank" href="https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/wheeler">zxcvbn: Low-Budget Password Strength Estimation</a></li>
+							<li><a target="_blank" href="https://xkcd.com/936/">XKCD-Comic "Password Strength"</a></li>
+							<li><a target="_blank" href="https://diogomonica.com/2014/10/11/password-security-why-the-horse-battery-staple-is-not-correct/">Why the horse battery staple is not correct</a></li>
+						</ul>
+					</small>
+					<hr />
+					<h3>Danke für's Zuhören!</h3>
+				</section><!-- /sources -->
+
+<!-- end slides -->
+			</div>
+		</div>
+
+		<script src="../reveal.js-4.3.1/dist/reveal.js"></script>
+		<script src="../reveal.js-4.3.1/plugin/notes/notes.js"></script>
+		<script src="../reveal.js-4.3.1/plugin/markdown/markdown.js"></script>
+		<script src="../reveal.js-4.3.1/plugin/highlight/highlight.js"></script>
+		<script>
+			// More info about initialization & config:
+			// - https://revealjs.com/initialization/
+			// - https://revealjs.com/config/
+			Reveal.initialize({
+				hash: true,
+
+				// Learn about plugins: https://revealjs.com/plugins/
+				plugins: [ RevealMarkdown, RevealHighlight, RevealNotes ]
+			});
+		</script>
+	</body>
+</html>
--- a/rechteverwaltung/res/cerberus-puppy.png
+++ b/rechteverwaltung/res/cerberus-puppy.png
--- a/rechteverwaltung/res/cerberus-puppy.xcf
+++ b/rechteverwaltung/res/cerberus-puppy.xcf
--- a/rechteverwaltung/res/lin-access-controls.png
+++ b/rechteverwaltung/res/lin-access-controls.png
--- a/rechteverwaltung/res/lin-access-controls.svg
+++ b/rechteverwaltung/res/lin-access-controls.svg
@ -0,0 +1,134 @@
+WARNING: SVG input document uses 7 flow text elements, which won't render on browsers!
+<svg width="226.22mm" height="135.8mm" version="1.1" viewBox="0 0 226.2229 135.8049" xmlns="http://www.w3.org/2000/svg">
+ <g transform="translate(7.2781 -80.175)">
+  <path d="m14.739 108.33c-1.1007 0-1.9897 0.889-1.9897 1.9897v8.0002c0 1.1007 0.889 1.9897 1.9897 1.9897h48.002c1.1007 0 1.9892-0.889 1.9892-1.9897v-8.0002c0-1.1007-0.88857-1.9897-1.9892-1.9897" fill="#ffc" fill-rule="evenodd"/>
+  <path d="m14.739 108.33c-1.1007 0-1.9897 0.889-1.9897 1.9897v8.0002c0 1.1007 0.889 1.9897 1.9897 1.9897h48.002c1.1007 0 1.9892-0.889 1.9892-1.9897v-8.0002c0-1.1007-0.88857-1.9897-1.9892-1.9897z" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456"/>
+  <path d="m14.739 124.33c-1.1007 0-1.9897 0.88857-1.9897 1.9892v8.0006c0 1.1002 0.889 1.9892 1.9897 1.9892h48.002c1.1007 0 1.9892-0.889 1.9892-1.9892v-8.0006c0-1.1007-0.88857-1.9892-1.9892-1.9892" fill="#ffc" fill-rule="evenodd"/>
+  <path d="m14.739 124.33c-1.1007 0-1.9897 0.88857-1.9897 1.9892v8.0006c0 1.1002 0.889 1.9892 1.9897 1.9892h48.002c1.1007 0 1.9892-0.889 1.9892-1.9892v-8.0006c0-1.1007-0.88857-1.9892-1.9892-1.9892z" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456"/>
+  <path d="m14.739 140.33c-1.1007 0-1.9897 0.88857-1.9897 1.9892v8.0006c0 1.1002 0.889 1.9892 1.9897 1.9892h48.002c1.1007 0 1.9892-0.889 1.9892-1.9892v-8.0006c0-1.1007-0.88857-1.9892-1.9892-1.9892" fill="#ffc" fill-rule="evenodd"/>
+  <path d="m14.739 140.33c-1.1007 0-1.9897 0.88857-1.9897 1.9892v8.0006c0 1.1002 0.889 1.9892 1.9897 1.9892h48.002c1.1007 0 1.9892-0.889 1.9892-1.9892v-8.0006c0-1.1007-0.88857-1.9892-1.9892-1.9892z" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456"/>
+  <path d="m99.018 116.29c-1.27 0-2.286 1.0583-2.286 2.3283v23.366c0 1.27 1.016 2.3283 2.286 2.3283h45.378c1.2696 0 2.3279-1.0583 2.3279-2.3283v-23.366c0-1.27-1.0583-2.3283-2.3279-2.3283" fill="#ffc" fill-rule="evenodd"/>
+  <path d="m99.018 116.29c-1.27 0-2.286 1.0583-2.286 2.3283v23.366c0 1.27 1.016 2.3283 2.286 2.3283h45.378c1.2696 0 2.3279-1.0583 2.3279-2.3283v-23.366c0-1.27-1.0583-2.3283-2.3279-2.3283z" fill="none" stroke="#333" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".88187"/>
+  <path d="m178.77 116.29c-1.1007 0-1.9897 0.93133-1.9897 2.032v7.9578c0 1.143 0.889 2.032 1.9897 2.032h30.012c1.1007 0 1.9897-0.889 1.9897-2.032v-7.9578c0-1.1007-0.889-2.032-1.9897-2.032" fill="#ffc" fill-rule="evenodd"/>
+  <path d="m178.77 116.29c-1.1007 0-1.9897 0.93133-1.9897 2.032v7.9578c0 1.143 0.889 2.032 1.9897 2.032h30.012c1.1007 0 1.9897-0.889 1.9897-2.032v-7.9578c0-1.1007-0.889-2.032-1.9897-2.032z" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456"/>
+  <g>
+   <path d="m64.815 114.21 27.557 12.445 0.0847 0.0847v0.0847l-0.0847 0.0847h-0.0847l-27.599-12.487-0.0423-0.0423v-0.127l0.0423-0.0423zm27.642 11.471 1.4812 1.8203-2.3702 0.0847"/>
+   <path d="m64.73 130.21h26.329l0.0423 0.127-0.0423 0.0847-0.0847 0.0423h-26.245l-0.0847-0.0423-0.0423-0.0847 0.0423-0.127zm25.906-0.93134 2.1167 1.0583-2.1167 1.0579"/>
+   <path d="m64.688 146.22 27.599-12.487h0.0847l0.0847 0.0423v0.127l-0.0847 0.0423-27.557 12.53h-0.127l-0.0423-0.0847v-0.0847zm26.88-13.207 2.3702 0.0847-1.4812 1.8627"/>
+  </g>
+  <path d="m178.77 132.33c-1.1007 0-1.9897 0.889-1.9897 1.9897v8.0002c0 1.1007 0.889 1.9897 1.9897 1.9897h30.012c1.1007 0 1.9897-0.889 1.9897-1.9897v-8.0002c0-1.1007-0.889-1.9897-1.9897-1.9897" fill="#ffc" fill-rule="evenodd"/>
+  <path d="m178.77 132.33c-1.1007 0-1.9897 0.889-1.9897 1.9897v8.0002c0 1.1007 0.889 1.9897 1.9897 1.9897h30.012c1.1007 0 1.9897-0.889 1.9897-1.9897v-8.0002c0-1.1007-0.889-1.9897-1.9897-1.9897z" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456"/>
+  <path d="m147.1 130.21 27.938-7.5772h0.12658l0.0423 0.0847v0.127l-0.0842 0.0423-27.938 7.5772-0.0847-0.0423-0.0847-0.0847 0.0423-0.0847zm27.345-8.3816 2.3279 0.46567-1.7352 1.5663"/>
+  <path d="m147.19 130.21 27.938 7.4922 0.0842 0.0847v0.0847l-0.0423 0.0847h-0.12657l-27.938-7.4922-0.0423-0.0847-0.0423-0.0847 0.0847-0.0847zm27.853 6.5185 1.7352 1.5663-2.2856 0.46566"/>
+  <path d="m193.75 108.33c-13.799 0-24.975 9.8628-24.975 22.012 0 12.148 11.175 21.969 24.975 21.969 13.842 0 25.017-9.8205 25.017-21.969 0-12.149-11.175-22.012-25.017-22.012z" fill="none" stroke="#333" stroke-dasharray="1.41099117, 1.0582402" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".35275"/>
+  <g transform="matrix(0 .35278 .35278 0 -39.754 37.201)">
+   <text transform="matrix(0 1 .99674 0 357.85 217.58)" fill="#808080" font-family="Tahoma" font-size="14.085px">
+    <tspan x="0 5.0345912 12.468767 19.789484 27.592535 31.795895 36.122555 46.558964 51.593571 54.840118 59.393063 66.827225" y="0">read, write,</tspan>
+    <tspan x="5.9995146 12.234888 19.669064 22.9156 30.34976 36.823181 41.496124 45.699486 50.026054" y="16.853531">select, …</tspan>
+   </text>
+  </g>
+  <path d="m42.677 154.51c1.3547-0.127 2.7512-0.21166 4.1059-0.21166 9.9475 0 17.99 3.5979 17.99 8.0002 0 4.445-8.0425 8.0006-17.99 8.0006-9.9052 0-17.99-3.5556-17.99-8.0006 0-2.5819 2.8787-5.0372 7.6196-6.5185l-0.71966-4.4873" fill="#f8f8f8" fill-rule="evenodd"/>
+  <path d="m42.677 154.51c1.3547-0.127 2.7512-0.21166 4.1059-0.21166 9.9475 0 17.99 3.5979 17.99 8.0002 0 4.445-8.0425 8.0006-17.99 8.0006-9.9052 0-17.99-3.5556-17.99-8.0006 0-2.5819 2.8787-5.0372 7.6196-6.5185l-0.71966-4.4873z" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456"/>
+  <g transform="matrix(0 .35278 .35278 0 -39.754 37.201)">
+   <text transform="matrix(0 1 .99674 0 351.85 211.58)" fill="#000000" font-family="Tahoma" font-size="14.085px">
+    <tspan x="0 5.0345912 12.468767 19.789484 27.592535 31.795895 36.122555 46.558964 51.593571 54.840118 59.393063 66.827225" y="0">read, write,</tspan>
+    <tspan x="5.9995146 12.234888 19.669064 22.9156 30.34976 36.823181 41.496124 45.699486 50.026054" y="16.853531">select, …</tspan>
+   </text>
+  </g>
+  <g transform="matrix(0 .35278 .35278 0 -49.765 45.877)">
+   <text transform="matrix(0 1 .99675 0 333.25 692.62)" fill="#808080" font-family="Tahoma" font-size="16.011px">
+    <tspan x="0 10.795565 19.188965 26.501471 30.108923 37.303673 41.031124 49.670864" y="0">Decision</tspan>
+   </text>
+  </g>
+  <path d="m197.79 153.32c1.6087-0.21167 3.3016-0.29634 4.9949-0.29634 8.8045 0 15.958 2.7089 15.958 6.0109 0 3.3439-7.1539 6.0109-15.958 6.0109-8.8468 0-16-2.667-16-6.0109 0-1.778 2.0739-3.4709 5.6718-4.6139l-3.5132-4.699" fill="#f8f8f8" fill-rule="evenodd"/>
+  <path d="m197.79 153.32c1.6087-0.21167 3.3016-0.29634 4.9949-0.29634 8.8045 0 15.958 2.7089 15.958 6.0109 0 3.3439-7.1539 6.0109-15.958 6.0109-8.8468 0-16-2.667-16-6.0109 0-1.778 2.0739-3.4709 5.6718-4.6139l-3.5132-4.699z" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456"/>
+  <path d="m38.782 180.33c-6.6455 0-11.979 1.2272-11.979 2.7512v16.509c0 1.524 5.3336 2.7517 11.979 2.7517 6.6036 0 11.979-1.2277 11.979-2.7517v-16.509c0-1.524-5.3759-2.7512-11.979-2.7512" fill="#ffc" fill-rule="evenodd"/>
+  <path d="m26.803 183.08c0 1.524 5.3336 2.7517 11.979 2.7517 6.6036 0 11.979-1.2277 11.979-2.7517s-5.3759-2.7512-11.979-2.7512c-6.6455 0-11.979 1.2272-11.979 2.7512" fill="#ffffd6" fill-rule="evenodd"/>
+  <path d="m38.782 180.33c-6.6455 0-11.979 1.2272-11.979 2.7512v16.509c0 1.524 5.3336 2.7517 11.979 2.7517 6.6036 0 11.979-1.2277 11.979-2.7517v-16.509c0-1.524-5.3759-2.7512-11.979-2.7512z" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456"/>
+  <path d="m26.803 183.08c0 1.524 5.3336 2.7517 11.979 2.7517 6.6036 0 11.979-1.2277 11.979-2.7517" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456"/>
+  <path d="m128.44 194.3c-0.889 0-1.651 0.762-1.651 1.6933v6.6455c0 0.93134 0.762 1.6933 1.651 1.6933h16.72c0.88858 0 1.6506-0.762 1.6506-1.6933v-6.6455c0-0.93134-0.762-1.6933-1.6506-1.6933" fill="#ffc" fill-rule="evenodd"/>
+  <path d="m128.44 194.3c-0.889 0-1.651 0.762-1.651 1.6933v6.6455c0 0.93134 0.762 1.6933 1.651 1.6933h16.72c0.88858 0 1.6506-0.762 1.6506-1.6933v-6.6455c0-0.93134-0.762-1.6933-1.6506-1.6933z" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456"/>
+  <path d="m136.78 178.3c-5.5029 0-9.9898 4.4869-9.9898 9.9898 0 5.5452 4.4869 10.032 9.9898 10.032 5.5452 0 10.032-4.4869 10.032-10.032 0-5.5029-4.4869-9.9898-10.032-9.9898" fill="#ffc" fill-rule="evenodd"/>
+  <path d="m136.78 178.3c-5.5029 0-9.9898 4.4869-9.9898 9.9898 0 5.5452 4.4869 10.032 9.9898 10.032 5.5452 0 10.032-4.4869 10.032-10.032 0-5.5029-4.4869-9.9898-10.032-9.9898z" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456"/>
+  <path d="m131.4 192.69c3.5983 2.4553 7.1962 2.4553 10.794 0" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456"/>
+  <path d="m133.6 184.27c-0.59267 0-1.0583 0.46567-1.0583 1.0583 0 0.55034 0.46567 1.016 1.0583 1.016 0.55033 0 1.016-0.46566 1.016-1.016 0-0.59266-0.46567-1.0583-1.016-1.0583" fill="#cdcda4" fill-rule="evenodd"/>
+  <path d="m139.99 184.27c-0.55033 0-1.0156 0.46567-1.0156 1.0583 0 0.55034 0.46524 1.016 1.0156 1.016 0.59267 0 1.0583-0.46566 1.0583-1.016 0-0.59266-0.46567-1.0583-1.0583-1.0583" fill="#cdcda4" fill-rule="evenodd"/>
+  <g fill="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456">
+   <path d="m133.6 184.27c-0.59267 0-1.0583 0.46567-1.0583 1.0583 0 0.55034 0.46567 1.016 1.0583 1.016 0.55033 0 1.016-0.46566 1.016-1.016 0-0.59266-0.46567-1.0583-1.016-1.0583z" stroke="#000"/>
+   <path d="m139.99 184.27c-0.55033 0-1.0156 0.46567-1.0156 1.0583 0 0.55034 0.46524 1.016 1.0156 1.016 0.59267 0 1.0583-0.46566 1.0583-1.016 0-0.59266-0.46567-1.0583-1.0583-1.0583z" stroke="#000"/>
+   <path d="m26.803 191.34h-20.403v-60.997h6.3491" stroke="#333" stroke-dasharray="0.79368227, 1.05824443"/>
+   <path d="m136.78 204.33v11.514h-143.92v-101.51h19.895" stroke="#333" stroke-dasharray="0.79368227, 1.05824443"/>
+  </g>
+  <g transform="matrix(0 .35278 .35278 0 -39.754 37.201)" fill="#808080" font-family="Tahoma" font-size="14.085px">
+   <text transform="matrix(0 1 .99674 0 434.4 569.03)">
+    <tspan x="0 14.64432 23.886877 30.12225 37.43647 42.464191 47.866055 57.218426 62.13306 69.812813 77.617531 85.300613 89.747269 95.026176" y="0">•User/Group ID</tspan>
+    <tspan x="0 14.64432 22.441807 30.246523 37.929604 45.363766 50.2784 58.083118 64.318489 71.752708 81.106857 88.782394 93.817032 97.063522" y="16.853531">•SuperuserPriv</tspan>
+    <tspan x="0" y="33.707062">•</tspan>
+   </text>
+   <text transform="matrix(0 1 .99674 0 468 583.67)" font-weight="bold">
+    <tspan x="0 8.8749552 17.157776 24.592253 33.589531 39.714714 43.917732 49.797009 57.847633 61.927692 69.963226 78.367622 87.249176 95.531937" y="0">Security Label</tspan>
+   </text>
+  </g>
+  <path d="m156.76 180.33v13.969l-14.223 7.2386 14.223-1.2277v4.0212h48.002v-24.001h-40.002" fill="#f8f8f8" fill-rule="evenodd"/>
+  <path d="m156.76 180.33v13.969l-14.223 7.2386 14.223-1.2277v4.0212h48.002v-24.001h-40.002z" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456"/>
+  <g transform="matrix(0 .35278 .35278 0 -39.754 37.201)" fill="#000000" font-family="Tahoma" font-size="14.085px">
+   <text transform="matrix(0 1 .99674 0 428.4 563.03)">
+    <tspan x="0 14.64432 23.886877 30.12225 37.43647 42.464191 47.866055 57.218426 62.13306 69.812813 77.617531 85.300613 89.747269 95.026176" y="0">•User/Group ID</tspan>
+    <tspan x="0 14.64432 22.441807 30.246523 37.929604 45.363766 50.2784 58.083118 64.318489 71.752708 81.106857 88.782394 93.817032 97.063522" y="16.853531">•SuperuserPriv</tspan>
+    <tspan x="0" y="33.707062">•</tspan>
+   </text>
+   <text transform="matrix(0 1 .99674 0 462 577.67)" font-weight="bold">
+    <tspan x="0 8.8749552 17.157776 24.592253 33.589531 39.714714 43.917732 49.797009 57.847633 61.927692 69.963226 78.367622 87.249176 95.531937" y="0">Security Label</tspan>
+   </text>
+  </g>
+  <g transform="matrix(0 .35278 .35278 0 -39.754 37.201)" fill="#808080" font-family="Tahoma" font-size="14.085px">
+   <text transform="matrix(0 1 .99674 0 414.73 302.66)">
+    <tspan x="0 14.644292 24.61017 34.926582 42.731297 50.04546 55.080063 59.526691 64.805573" y="0">•Owner ID</tspan>
+    <tspan x="0 14.644292 22.319799 29.753962 34.788567 46.549702 49.796253 56.031624 62.266998 65.51355 73.193298 80.998016 85.324677 93.598915 96.845467 101.51841" y="16.733139">•Permission Bits</tspan>
+    <tspan x="0 14.637404 23.04903 31.454115" y="33.58667">•ACL</tspan>
+    <tspan x="0" y="50.440201">•</tspan>
+   </text>
+   <text transform="matrix(0 1 .99674 0 465 317.29)" font-weight="bold">
+    <tspan x="0 8.8749847 17.157747 24.592253 33.5895 39.714687 43.917732 49.797009 57.847603 61.927692 69.963226 78.367653 87.249176 95.531937" y="0">Security Label</tspan>
+   </text>
+  </g>
+  <path d="m62.783 174.32v16.339l-17.355 6.6032 17.355 0.381v4.699h47.959v-28.023h-40.002" fill="#f8f8f8" fill-rule="evenodd"/>
+  <path d="m62.783 174.32v16.339l-17.355 6.6032 17.355 0.381v4.699h47.959v-28.023h-40.002z" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456"/>
+  <g transform="matrix(0 .35278 .35278 0 -39.754 37.201)" fill="#000000" font-family="Tahoma" font-size="14.085px">
+   <text transform="matrix(0 1 .99674 0 408.73 296.66)">
+    <tspan x="0 14.644292 24.61017 34.926582 42.731297 50.04546 55.080063 59.526691 64.805573" y="0">•Owner ID</tspan>
+    <tspan x="0 14.644292 22.319799 29.753962 34.788567 46.549702 49.796253 56.031624 62.266998 65.51355 73.193298 80.998016 85.324677 93.598915 96.845467 101.51841" y="16.733139">•Permission Bits</tspan>
+    <tspan x="0 14.637404 23.04903 31.454115" y="33.58667">•ACL</tspan>
+    <tspan x="0" y="50.440201">•</tspan>
+   </text>
+   <text transform="matrix(0 1 .99674 0 459 311.29)" font-weight="bold">
+    <tspan x="0 8.8749847 17.157747 24.592253 33.5895 39.714687 43.917732 49.797009 57.847603 61.927692 69.963226 78.367653 87.249176 95.531937" y="0">Security Label</tspan>
+   </text>
+  </g>
+  <g transform="matrix(0 .35278 .35278 0 -39.754 37.201)" fill="#808080" font-family="Tahoma" font-size="14.085px">
+   <text transform="matrix(0 1 .99674 0 148.23 444.36)">
+    <tspan x="0 14.644292 21.95682 25.203369 28.449919 35.884079 42.119453 49.078152 55.313522 59.986408 67.300629 83.501511 91.177048 98.611206 103.64584 115.40704 118.65353 124.8889 131.12427 134.25082 141.93057" y="0">•FilesystemPermission</tspan>
+    <tspan x="0 14.644292 24.120306 31.441038 36.113983 43.434711 51.237793 58.558495 64.79393 72.228088 76.667831 85.079514 93.484604" y="16.853531">•Database ACL</tspan>
+    <tspan x="0" y="33.58667">•</tspan>
+   </text>
+   <text transform="matrix(0 1 .99674 0 181.71 459)" font-weight="bold">
+    <tspan x="0 8.8749847 17.510918 25.546452 29.749496 38.746777 47.737198" y="0">SELinux</tspan>
+   </text>
+   <text transform="matrix(0 1 .99674 0 198.5 444.36)">
+    <tspan x="0 14.644292 22.324045 26.99699 34.681705 42.115868 47.150475 53.385788 64.899384" y="0">•others…?</tspan>
+   </text>
+  </g>
+  <path d="m112.77 80.307v28.023h9.6512l-5.1642 11.217 19.683-11.217h33.864v-28.023h-48.383" fill="#f8f8f8" fill-rule="evenodd"/>
+  <path d="m112.77 80.307v28.023h9.6512l-5.1642 11.217 19.683-11.217h33.864v-28.023h-48.383z" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width=".26456"/>
+  <g transform="matrix(0 .35278 .35278 0 -39.754 37.201)">
+   <flowRoot transform="matrix(0 .75 .75 0 99.003 7.5671)" fill="#000000" font-family="Arimo" font-size="18.667px" letter-spacing="0px" word-spacing="0px" style="font-feature-settings:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-variant-numeric:normal;line-height:25px" xml:space="preserve"><flowRegion><rect x="575.1" y="33.632" width="216.92" height="104.26"/></flowRegion><flowPara>- Dateisystem</flowPara><flowPara>- ACL</flowPara><flowPara>- SELinux</flowPara><flowPara>- andere</flowPara></flowRoot>
+  </g>
+  <text x="29.430771" y="115.50696" fill="#000000" font-family="Arimo" font-size="4.9389px" letter-spacing="0px" stroke-width=".26458" word-spacing="0px" style="font-feature-settings:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-variant-numeric:normal;line-height:6.61458349px" xml:space="preserve"><tspan x="29.430771" y="115.50696" stroke-width=".26458">Subjekt</tspan></text>
+  <flowRoot transform="matrix(.26458 0 0 .26458 -31.301 37.424)" fill="#000000" font-family="Arimo" font-size="18.667px" letter-spacing="0px" word-spacing="0px" style="font-feature-settings:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-variant-numeric:normal;line-height:25px" xml:space="preserve"><flowRegion><rect x="233.74" y="338.84" width="140.41" height="28.587"/></flowRegion><flowPara>Objekt</flowPara></flowRoot>
+  <flowRoot transform="matrix(.26458 0 0 .26458 -27.741 38.314)" fill="#000000" font-family="Arimo" font-size="18.667px" letter-spacing="0px" word-spacing="0px" style="font-feature-settings:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-variant-numeric:normal;line-height:25px" xml:space="preserve"><flowRegion><rect x="222.81" y="396.85" width="142.93" height="32.791"/></flowRegion><flowPara>Aktion</flowPara></flowRoot>
+  <flowRoot transform="matrix(.26458 0 0 .26458 -39.754 39.648)" fill="#000000" font-family="Arimo" font-size="18.667px" letter-spacing="0px" word-spacing="0px" style="font-feature-settings:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-variant-numeric:normal;line-height:25px" xml:space="preserve"><flowRegion><rect x="527.18" y="316.98" width="174.88" height="77.353"/></flowRegion><flowPara>Zugriffskontrollen /</flowPara><flowPara>Rechtemanagement</flowPara></flowRoot>
+  <flowRoot transform="matrix(.26458 0 0 .26458 -53.547 45.432)" fill="#000000" font-family="Arimo" font-size="18.667px" letter-spacing="0px" word-spacing="0px" style="font-feature-settings:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-variant-numeric:normal;line-height:25px" xml:space="preserve"><flowRegion><rect x="912.14" y="415.7" width="122.5" height="25.598"/></flowRegion><flowPara>Entscheidung</flowPara></flowRoot>
+  <flowRoot transform="matrix(.26458 0 0 .26458 -32.635 40.093)" fill="#000000" font-family="Arimo" font-size="18.667px" letter-spacing="0px" word-spacing="0px" style="font-feature-settings:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-variant-numeric:normal;line-height:25px" xml:space="preserve"><flowRegion><rect x="825.91" y="298.91" width="115.78" height="44.975"/></flowRegion><flowPara>Erlaubt</flowPara></flowRoot>
+  <flowRoot transform="matrix(.26458 0 0 .26458 -38.864 37.869)" fill="#000000" font-family="Arimo" font-size="18.667px" letter-spacing="0px" word-spacing="0px" style="font-feature-settings:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-variant-numeric:normal;line-height:25px" xml:space="preserve"><flowRegion><rect x="838.27" y="368.27" width="105.1" height="27.746"/></flowRegion><flowPara>Verhindert</flowPara></flowRoot>
+ </g>
+</svg>
--- a/rechteverwaltung/res/uac.png
+++ b/rechteverwaltung/res/uac.png
--- a/rechteverwaltung/res/win-access-controls.svg
+++ b/rechteverwaltung/res/win-access-controls.svg
--- a/rechteverwaltung/res/win-mac-communication.svg
+++ b/rechteverwaltung/res/win-mac-communication.svg
@ -0,0 +1,20 @@
+<svg width="446.56" height="279.16" version="1.1" viewBox="0 0 446.56378 279.1586" xml:space="preserve" xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="clipPath108"><path d="m84 62.854h320.72v170.99h-320.72z"/></clipPath><clipPath id="clipPath206"><path d="m84 62.854h320.72v170.99h-320.72z"/></clipPath></defs><g transform="matrix(1.3333 0 0 -1.3333 -112.54 342.31)"><text transform="scale(1,-1)" x="301.88925" y="-49.284943" fill="#a7a5a6" font-family="Segoe" font-size="8px" font-weight="bold"><tspan x="301.88925 306.88126 313.00925 318.63324 323.54526 328.23325 332.48926 337.57724 339.78525" y="-49.284943">CHAPTER 6</tspan></text><g fill="#231f20" font-family="Segoe">
+<text transform="scale(1,-1)" x="352.38925" y="-49.284943" font-size="8px"><tspan x="352.38925 356.36523 360.48526 364.14926 368.67725 371.46124 373.39725 376.10925" y="-49.284943">Security</tspan></text><g font-size="9px">
+<text transform="scale(1,-1)" x="403.45276" y="-49.284943" font-weight="bold"><tspan x="403.45276 408.62775 413.80273" y="-49.284943">493</tspan></text>
+<text transform="matrix(1 0 0 -1 96 249.85)"><tspan x="0 4.4099998 6.6329999 11.925 17.01 20.25 24.885 27.351 32.445 35.667 40.518002 42.984001 46.529999 51.705002 56.933998 63.549 67.058998 69.525002 72.594002 77.768997 82.403999" y="0">Figure 6-2 shows the </tspan></text>
+<text transform="matrix(1 0 0 -1 180.87 249.85)"><tspan x="0 4.1220002 9.3870001 17.172001 24.975 30.059999 35.172001 37.376999 41.625 46.196999 49.265999 51.488998 56.754002 61.848 64.314003 69.651001 74.223 77.292 82.467003 85.976997 88.443001 93.086998 96.597 99.063004 102.132 107.307 112.005 116.361 118.827 123.516 127.719 129.942 133.59599 136.647 139.11301 143.658 146.84399 149.922 154.647 157.77901 160.245 163.944 168.408 172.062 175.14 179.86501 187.614 190.08 192.258 197.37 199.593 202.662 204.858 209.439 211.617 213.858 218.088 222.66 225.729 227.952 233.217 238.455" y="0">communication paths as they exist after system initialization </tspan></text>
+</g></g><path d="m176.89 165.73h-76.667v28h76.667z" fill="#f4f8b8"/><g transform="translate(176.89 165.73)"><path d="m0 0h-76.667v28h76.667z" fill="none" stroke="#110f0d"/></g><text transform="matrix(1 0 0 -1 110.58 181.38)" fill="#110f0d" font-family="Segoe" font-size="8px"><tspan x="0 4.9520001 9.5760002 16.464001 23.351999 27.879999 32.408001 34.344002 38.007999 42.048 44.759998 46.695999 51.32" y="0">Communication</tspan><tspan x="20.416 25.087999 29.712 32.728001" y="9.6000004">port</tspan></text>
+<g clip-path="url(#clipPath108)"><g transform="translate(90.721 147.4)"><path d="m0 0h314" fill="none" stroke="#110f0d" stroke-width="2"/></g></g><text transform="matrix(1 0 0 -1 362.91 153.04)" fill="#110f0d" font-family="Segoe" font-size="8px" font-weight="bold"><tspan x="0 5.7839999 9.3039999 13.632 16.816 19.024 26.351999 31.24 36.192001" y="0">User mode</tspan><tspan x="-7.2719998 -2.1600001 2.168 5.3759999 10.216 14.544 16.816 19.024 26.351999 31.24 36.192001" y="16.336">Kernel mode</tspan></text>
+<path d="m333.89 165.73h-76.667v28h76.667z" fill="#f4f8b8"/><g transform="translate(333.89 165.73)"><path d="m0 0h-76.667v28h76.667z" fill="none" stroke="#110f0d"/></g><text transform="matrix(1 0 0 -1 267.58 181.38)" fill="#110f0d" font-family="Segoe" font-size="8px"><tspan x="0 4.9520001 9.5760002 16.464001 23.351999 27.879999 32.408001 34.344002 38.007999 42.048 44.759998 46.695999 51.32" y="0">Communication</tspan><tspan x="20.416 25.087999 29.712 32.728001" y="9.6000004">port</tspan></text>
+<path d="m257.22 165.73h-80.333v28h80.333z" fill="#f4f8b8"/><g transform="translate(257.22 165.73)"><path d="m0 0h-80.333v28h80.333z" fill="none" stroke="#110f0d"/></g><text transform="matrix(1 0 0 -1 181.92 177.38)" fill="#110f0d" font-family="Segoe" font-size="8px"><tspan x="0 3.9760001 8.0959997 11.864 14.984 19.024 23.976 28.6 35.487999 42.375999 46.416 50.944 55.624001 59.807999 64.431999 67.447998" y="0">SeLsaCommandPort</tspan></text>
+<path d="m257.22 193.73h-80.333v28h80.333z" fill="#f4f8b8"/><g transform="translate(257.22 193.73)"><path d="m0 0h-80.333v28h80.333z" fill="none" stroke="#110f0d"/></g><text transform="matrix(1 0 0 -1 193.09 209.38)" fill="#110f0d" font-family="Segoe" font-size="8px"><tspan x="0 3.7679999 8.3920002 12.056 16.096001 18.032 20.224001 24.200001 28.32 31.983999 36.512001 39.296001 41.231998 43.944" y="0">Local Security</tspan><tspan x="-14.12 -8.96 -4.4320002 -1.72 2.8080001 7.4320002 10.216 12.152 14.864 18.736 20.927999 23.344 27.112 31.087999 36.248001 38.664001 40.855999 43.976002 48.096001 51.200001 55.032001 59.152" y="9.6000004">Authority (LSA) server</tspan></text>
+<path d="m176.89 94.732h-76.667v28h76.667z" fill="#f4f8b8"/><g transform="translate(176.89 94.732)"><path d="m0 0h-76.667v28h76.667z" fill="none" stroke="#110f0d"/></g><text transform="matrix(1 0 0 -1 110.58 110.38)" fill="#110f0d" font-family="Segoe" font-size="8px"><tspan x="0 4.9520001 9.5760002 16.464001 23.351999 27.879999 32.408001 34.344002 38.007999 42.048 44.759998 46.695999 51.32" y="0">Communication</tspan><tspan x="20.416 25.087999 29.712 32.728001" y="9.6000004">port</tspan></text>
+<path d="m333.89 94.732h-76.667v28h76.667z" fill="#f4f8b8"/><g transform="translate(333.89 94.732)"><path d="m0 0h-76.667v28h76.667z" fill="none" stroke="#110f0d"/></g><text transform="matrix(1 0 0 -1 267.58 110.38)" fill="#110f0d" font-family="Segoe" font-size="8px"><tspan x="0 4.9520001 9.5760002 16.464001 23.351999 27.879999 32.408001 34.344002 38.007999 42.048 44.759998 46.695999 51.32" y="0">Communication</tspan><tspan x="20.416 25.087999 29.712 32.728001" y="9.6000004">port</tspan></text>
+<path d="m257.22 94.732h-80.333v28h80.333z" fill="#f4f8b8"/><g transform="translate(257.22 94.732)"><path d="m0 0h-80.333v28h80.333z" fill="none" stroke="#110f0d"/></g><text transform="matrix(1 0 0 -1 181.64 106.38)" fill="#110f0d" font-family="Segoe" font-size="8px"><tspan x="0 3.9760001 8.0959997 12.696 19.584 24.535999 29.16 36.048 42.936001 46.976002 51.504002 56.183998 60.368 64.991997 68.008003" y="0">SeRmCommandPort</tspan></text>
+<path d="m257.22 66.733h-80.333v28h80.333z" fill="#f4f8b8"/><g transform="translate(257.22 66.733)"><path d="m0 0h-80.333v28h80.333z" fill="none" stroke="#110f0d"/></g><text transform="matrix(1 0 0 -1 185.84 82.378)" fill="#110f0d" font-family="Segoe" font-size="8px"><tspan x="0 3.9760001 8.0959997 11.76 16.288 19.072001 21.007999 23.719999 27.591999 29.784 32.464001 36.584 39.088001 43.208 45.888 50.007999 54.535999 58.200001" y="0">Security reference</tspan><tspan x="5.7199998 12.608 17.232 21.76 23.695999 26.408001 31.032 33.816002 36.007999 38.424 42.400002 47 54.183998" y="9.6000004">monitor (SRM)</tspan></text>
+<g clip-path="url(#clipPath206)"><text transform="matrix(1 0 0 -1 84 227.04)" fill="#110f0d" font-family="Segoe" font-size="8px"><tspan x="0 3.9760001 8.0959997 10.808 13 17.040001 21.568001 26.247999 28.184 30.896 33.088001 37.208 41.040001 45.16 49.688" y="0">Set audit event</tspan></text>
+</g><text transform="matrix(1 0 0 -1 84 217.44)" fill="#110f0d" font-family="Segoe" font-size="8px"><tspan x="0 4.9520001 7.632 11.752 15.792 18.504 22.624001 24.816 26.752001 31.375999 36.056 40.68 45.208 47.400002 50.52 54.639999 57.759998 60.880001 62.816002 67.440002" y="0">Create logon session</tspan><tspan x="0 5.6079998 9.7279997 11.664 15.784 18.496 22.615999 24.808001 26.743999 31.368 36.048 40.672001 45.200001 47.391998 50.512001 54.632 57.751999 60.872002 62.807999 67.431999" y="9.6000004">Delete logon session</tspan><tspan x="188.664 196.136 198.92 200.856 203.56799 207.688 209.88 213.92 218.448 223.12801 225.064 227.776 229.968 236.856 240.976 244.09599 247.216 251.256 255.936" y="142.73599">Write audit message</tspan><tspan x="188.664 194.272 198.392 200.328 204.448 207.16 211.28 213.472 215.408 220.032 224.71201 229.336 233.864 236.056 239.17599 243.29601 246.416 249.536 251.472 256.09601" y="152.336">Delete logon session</tspan></text>
+<path d="m381.56 103.4h-40.667v28h40.667z" fill="#f4f8b8"/><g transform="translate(381.56 103.4)"><path d="m0 0h-40.667v28h40.667z" fill="none" stroke="#110f0d"/></g><text transform="matrix(1 0 0 -1 349.16 119.04)" fill="#110f0d" font-family="Segoe" font-size="8px"><tspan x="0 3.9760001 8.5039997 12.544 15.224 19.344" y="0">Shared</tspan><tspan x="-0.34400001 2.776 6.8959999 10.56 13.272 15.208 19.832001" y="9.6000004">section</tspan></text>
+<g transform="translate(136.3 127.13)"><path d="M 0,0 1.745,-3.023 3.49,0 Z" fill="#fff"/></g><g transform="translate(139.8 161.44)"><path d="M 0,0 -1.745,3.022 -3.49,0 Z" fill="#fff"/></g><g transform="translate(138.05 161.95)"><path d="m0 0v-35.334" fill="none" stroke="#110f0d"/></g><g transform="translate(136.3 127.13)"><path d="M 0,0 1.745,-3.023 3.49,0 Z" fill="#110f0d"/></g><g transform="translate(139.8 161.44)"><path d="M 0,0 -1.745,3.022 -3.49,0 Z" fill="#110f0d"/></g><g transform="translate(296.97 127.13)"><path d="M 0,0 1.744,-3.023 3.49,0 Z" fill="#fff"/></g><g transform="translate(300.47 161.44)"><path d="M 0,0 -1.744,3.022 -3.49,0 Z" fill="#fff"/></g><g transform="translate(298.72 161.95)"><path d="m0 0v-35.334" fill="none" stroke="#110f0d"/></g><g transform="translate(296.97 127.13)"><path d="M 0,0 1.744,-3.023 3.49,0 Z" fill="#110f0d"/></g><g transform="translate(300.47 161.44)"><path d="M 0,0 -1.744,3.022 -3.49,0 Z" fill="#110f0d"/></g><text transform="matrix(1 0 0 -1 84 48.854)" fill="#231f20" font-family="Segoe" font-size="7.5px" font-weight="bold"><tspan x="0 3.9825001 6.48 11.9325 17.452499 22.327499 26.317499 28.387501 32.9175 35.7225" y="0">FIGURE 6-2</tspan></text>
+<text transform="matrix(1 0 0 -1 128.04 48.854)" fill="#231f20" font-family="Segoe" font-size="8px"><tspan x="0 4.9759998 9.6879997 16.639999 23.615999 28.176001 32.759998 34.759998 38.576 42.68 45.448002 47.464001 52.175999 56.703999 58.896 63.703999 67.944 70.968002 76.800003 81.087997 85.328003 89.856003 92.047997 94.807999 99.447998 103.568 105.76 109.776 114.464 121.648 123.84 127.944 132.592 137.272 139.464 143.43201 147.504 152.864 156.912" y="0">Communication between the SRM and LSASS</tspan></text>
+</g></svg>
--- a/rechteverwaltung/slides.html
+++ b/rechteverwaltung/slides.html
@ -0,0 +1,314 @@
+<!doctype html>
+<html>
+	<head>
+		<meta charset="utf-8">
+		<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
+
+		<title>Rechtetrennung in modernen Betriebssystemen</title>
+
+		<link rel="stylesheet" href="../reveal.js-4.3.1/dist/reset.css">
+		<link rel="stylesheet" href="../reveal.js-4.3.1/dist/reveal.css">
+		<link rel="stylesheet" href="../reveal.js-4.3.1/dist/theme/serif.css">
+
+		<!-- Theme used for syntax highlighted code -->
+		<link rel="stylesheet" href="../reveal.js-4.3.1/plugin/highlight/monokai.css">
+	</head>
+	<body>
+		<div class="reveal">
+			<div class="slides">
+<!-- begin slides -->
+
+				<section>
+					<h3>Gemeinsames Sorgerecht</h3>
+					<img class="stretch plain" src="res/cerberus-puppy.png" />
+					<h4>Ein Überblick über Rechtetrennung in modernen Betriebssystemen</h4>
+					<p>
+						<small>CC-BY-SA 2018-02-06 Helix/RaumZeitLabor</small>
+					</p>
+				</section>
+
+				<section>
+					<h3>Agenda</h3>
+					<ul class="fragment">
+						<li>warum braucht man Rechte?</li>
+						<li class="fragment">Rechtetrennung in Unix</li>
+						<li class="fragment">Erweiterungen in GNU/Linux</li>
+						<li class="fragment">Rechtetrennung in Windows</li>
+						<li class="fragment">Grenzen und Lücken.</li>
+					</ul>
+				</section>
+
+				<section><!-- what -->
+					<section>
+						<h4>Warum braucht man überhaupt</h4>
+						<h3>Rechte?</h3>
+					</section>
+
+					<section>
+						<h3>Authentifizierung vs. Autorisierung</h3>
+					</section>
+
+					<section>
+						<h3>Subjekte und Objekte</h3>
+						<ul>
+							<li class="fragment">Subjekte greifen auf Objekte zu</li>
+							<li class="fragment">Nicht jedes Subjekt darf jedes Objekt benutzen</li>
+							<li class="fragment">Böse Subjekte schon gar nicht.</li>
+						</ul>
+					</section>
+
+					<section>
+						<h3>Beispiele</h3>
+						<ul class="fragment">
+							<li>Subjekte:
+								<ul>
+									<li class="fragment">Prozesse</li>
+								</ul>
+							</li>
+							<br />
+							<li class="fragment">Objekte:
+								<ul>
+									<li class="fragment">Dateien</li>
+									<li class="fragment">Ordner</li>
+									<li class="fragment">Sockets</li>
+									<li class="fragment">Prozesse</li>
+									<li class="fragment">virtueller Speicher.</li>
+								</ul>
+							</li>
+						</ul>
+					</section>
+				</section><!-- /what -->
+
+				<section><!-- Unix -->
+					<section>
+						<h4>Rechtetrennung in</h4>
+						<h3>Unix / POSIX</h3>
+					</section>
+
+					<section>
+						<h3>Benutzer und Gruppen</h3>
+						<ul>
+							<li class="fragment">Besitzer (u)</li>
+							<li class="fragment">Gruppe (g)</li>
+							<li class="fragment">Andere (o)</li>
+							<li class="fragment">Alle (a).</li>
+						</ul>
+					</section>
+
+					<section>
+						<h3>Dateirechte</h3>
+						<div class="fragment">
+							<p>Bei jeder Datei:</p>
+							<code>u g o a</code>
+						</div>
+						<div class="fragment">
+							<p>und für jedes Besitzverhältnis</p>
+							<code>r w x</code>
+						</div>
+					</section>
+
+					<section>
+						<h3>Oktale Notation</h3>
+						<ul class="fragment">
+							<li>r = 4</li>
+							<li>w = 2</li>
+							<li>x = 1</li>
+						</ul>
+						<div class="fragment">
+							<p>Ausrechnen:</p>
+							<ul>
+								<li class="fragment">r + x<span class="fragment"> = 4 + 1</span><span class="fragment"> = 5</span></li>
+								<li class="fragment">r + w<span class="fragment"> = 6</span></li>
+								<li class="fragment">r + w + x<span class="fragment"> = 7</span></li>
+								<li class="fragment">w + x<span class="fragment"> = 3.</span></li>
+							</ul>
+						</div>
+					</section>
+
+					<section>
+						<h3>Oktal notierte Dateirechte</h3>
+						<pre class="fragment"><code>% ls -l datei.txt
+-rw-rw-r--. 1 helix helix 0  5. Feb 19:17 datei.txt
+
+<div class="fragment">% chmod 777 datei.txt</div>
+<div class="fragment">% ls -l datei.txt
+-rwxrwxrwx. 1 helix helix 0  5. Feb 19:17 datei.txt</span>
+</code></pre>
+					</section>
+
+					<section>
+						<h3>Berechtigungen ändern</h3>
+						<ul>
+							<li class="fragment">Der Besitzer darf das, Gruppen nicht</li>
+							<li class="fragment">Root darf eh alles.</li>
+						</ul>
+					</section>
+
+					<section>
+						<h3>ACLs</h3>
+						<ul>
+							<li class="fragment">pro Benutzer (u)</li>
+							<li class="fragment">pro Gruppe (g)</li>
+							<li class="fragment">Rechtemaske (m)</li>
+							<li class="fragment">Benutzer, die nicht in Gruppen oder ACL sind (o).</li>
+						</ul>
+					</section>
+				</section> <!-- /Unix -->
+
+				<section><!-- Linux -->
+					<section>
+						<h4>Erweiterungen in</h4>
+						<h3>GNU/Linux</h3>
+					</section>
+
+					<section>
+						<h3>Capabilities (Fähigkeiten)</h3>
+						<ul class="fragment">
+							<li>mit seccomp-Erweiterung verfügbar</li>
+							<li class="fragment">derzeit 35 Stück im Linux-Kernel</li>
+							<li class="fragment">Beispiele: <br />chown, setuid, setgid, net_raw, net_bind_service, …</li>
+							<li class="fragment">fallenlassen möglich und erwünscht.</li>
+						</ul>
+					</section>
+
+					<section>
+						<h3>Namespaces</h3>
+						<ul class="fragment">
+							<li>Leichtgewichtige Prozess-Virtualisierung</li>
+							<li class="fragment">Isolierung: Ein Prozess hat eine andere Sicht auf das System</li>
+							<li class="fragment">Kein Hypervisor (wie bei VMs)</li>
+							<li class="fragment">Besonders nützlich: netns / veth</li>
+							<li class="fragment">Weitere Namespaces: PID, <abbr title="UNIX Timesharing System">UTS</abbr> (hostname), Mount, user.</li>
+						</ul>
+					</section>
+
+					<section>
+						<h3>Control Groups</h3>
+						<ul class="fragment">
+							<li>regeln den Zugriff auf Systemressourcen</li>
+							<li class="fragment">Implementieren Möglichkeiten zur Steuerung der Auslastung</li>
+							<li class="fragment">RAM, CPU, Netzwerkprioritäten, Geräte, etc.</li>
+						</ul>
+					</section>
+
+					<section>
+						<h3>Mandatory Access Controls</h3>
+						<p class="fragment">Geben jedem Benutzer und jeder Gruppe einen Kontext und Freigaben für ihre Arbeit mit "Regeln".</p>
+						<h4 class="fragment">Beispiele:</h4>
+						<ul class="fragment">
+							<li>SELinux</li>
+							<li>AppArmor</li>
+							<li>Smack</li>
+							<li>TOMOYO</li>
+						</ul>
+						<p class="fragment">Die meisten Systeme nutzen Linux Security Modules im Kernel.</p>
+					</section>
+
+					<section>
+						<h4>Übersicht über das Rechtemodell in GNU/Linux</h4>
+						<img class="stretch plain" src="res/lin-access-controls.png" />
+					</section>
+
+					<section>
+						<h3>MAC vs. <abbr title="Discretionary Access Control">DAC</abbr>, <abbr title="Role-Based Access Control">RBAC</abbr></h3>
+					</section>
+
+					<section>
+					  <h3>Was kann man damit machen?</h3>
+						<ul class="fragment">
+							<li>Sandbox (chroot, firejail)</li>
+							<li class="fragment">Container (<abbr title="Linux Containers">LXC</abbr>, Docker)</li>
+							<li class="fragment">VMs (VirtualBox, VMWare, KVM).</li>
+						</ul>
+					</section>
+				</section><!-- /Linux -->
+
+				<section><!-- Windows -->
+					<section>
+						<h4>Natürlich gibt es Rechtetrennung auch in</h4>
+						<h3>Windows</h3>
+					</section>
+
+					<section>
+						<h3>Das Dateisystem</h3>
+						<ul class="fragment">
+							<li>i.d.R. NTFS</li>
+							<li class="fragment">hat auch Benutzer, Gruppen</li>
+							<li class="fragment">POSIX-Modus</li>
+							<li class="fragment">und ACLs.</li>
+						</ul>
+					</section>
+
+					<section>
+						<h3>Verwirrende Grafik aus einem <abbr title="Windows internals">Buch</abbr></h3>
+						<img class="stretch plain" src="res/win-access-controls.svg" />
+					</section>
+
+					<section>
+						<h3>Die wichtigsten Komponenten</h3>
+						<ul class="fragment">
+							<li><abbr title="Security Reference Monitor">SRM</abbr> – Security checks</li>
+							<li class="fragment"><abbr title="Local Security Authority Subsystem">LSASS</abbr>/<abbr title="Local Security Authority Service">LSASRV</abbr> – lokale System-Sicherheitsrichtlinienverwaltung</li>
+							<li class="fragment"><abbr title="Security Accounts Manager">SAM</abbr> – Service/DB mit Benutzer- und Gruppendaten</li>
+							<li class="fragment">HAL, <abbr title="Kernel Security Device Driver">KSecDD</abbr> – Hardware-Abstraktion</li>
+							<li class="fragment">AppLocker – MAC.</li>
+						</ul>
+					</section>
+
+					<section>
+						<h3>Kommunikation der Komponenten</h3>
+						<img class="stretch plain" src="res/win-mac-communication.svg" />
+					</section>
+
+					<section>
+						<h3>Benutzerkontensteuerung</h3>
+						<img class="stretch plain" src="res/uac.png" />
+					</section>
+				</section><!-- /Windows -->
+
+				<section><!-- pitfalls -->
+					<h3>Gegen was Rechtemanagement <strong>nicht</strong> hilft</h3>
+					<ul class="fragment">
+						<li>Kernel-Bugs (ring0)</li>
+						<li class="fragment">Fehler im Rechtemanagement (Bugs/Konfiguration)</li>
+						<li class="fragment">Hardware-Bugs</li>
+						<li class="fragment">verwanzte Hardware</li>
+						<li class="fragment"><strong>BENUTZER</strong>.</li>
+					</ul>
+				</section><!-- /pitfalls -->
+
+				<section><!-- sources -->
+					<h4>Quellen</h4>
+					<small>
+						<ul>
+							<li><a href="https://akreon.deviantart.com/art/Cerberus-puppy-684305376">Kerberos – akreon (DeviantArt)</a></li>
+							<li><a href="https://www.nccgroup.trust/globalassets/our-research/us/whitepapers/2016/april/ncc_group_understanding_hardening_linux_containers-1-1.pdf">Understanding and Hardening Linux Containers (NCC Group Whitepaper)</a></li>
+							<li><a href="http://materias.fi.uba.ar/7508/WI6/Windows%20Internals%20Part%201%20(6th%20Edition).pdf">Windows Internals Part 1 (6th Edition)</a></li>
+							<li><a href="https://www.slideshare.net/kaigai/label-based-mandatory-access-control-on-postgresql">Label based Mandatory Access Control on PostgreSQL (PGcon2011, Kohei KaiGai)</a></li>
+						</ul>
+					</small>
+					<hr />
+					<h3>Danke für's Zuhören!</h3>
+				</section><!-- /sources -->
+
+<!-- end slides -->
+			</div>
+		</div>
+
+		<script src="../reveal.js-4.3.1/dist/reveal.js"></script>
+		<script src="../reveal.js-4.3.1/plugin/notes/notes.js"></script>
+		<script src="../reveal.js-4.3.1/plugin/markdown/markdown.js"></script>
+		<script src="../reveal.js-4.3.1/plugin/highlight/highlight.js"></script>
+		<script>
+			// More info about initialization & config:
+			// - https://revealjs.com/initialization/
+			// - https://revealjs.com/config/
+			Reveal.initialize({
+				hash: true,
+
+				// Learn about plugins: https://revealjs.com/plugins/
+				plugins: [ RevealMarkdown, RevealHighlight, RevealNotes ]
+			});
+		</script>
+	</body>
+</html>
--- a/reveal.js-4.3.1
+++ b/reveal.js-4.3.1
@ -0,0 +1 @@
+Subproject commit b23d15c4304a9a1b72f484171fc97682e5ed85a3
				`@ -0,0 +1 @@`
				`Subproject commit b23d15c4304a9a1b72f484171fc97682e5ed85a3`