Downright : a framework and toolchain for privilege handling

© 2019 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.We propose Downright, a novel framework based on Seccomp, Berkeley Packet Filter, and PTrace, that makes it possible to equip new and existing C applications with a request broker architecture. An extensive configuration language allows AppArmor-like configuration that supports programmers in building rules for system call parameter validation and result sanitization. Access to these privileged function calls can be restricted both within Linux kernel and user spaces. Downright's main strength compared to related approaches is that it implements a complete mediation request broker architecture, in which all system calls are vetted before execution, either by the kernel or by a request broker, which runs as another process. This isolates the main program from many failures due to programming bugs and attacks, which would have to pass not only the attacked program, but the request broker also. We argue that this makes acquiring and releasing elevated privileges easier and safer. Downright eliminates the need to write Seccomp programs, instead allowing policies to be expressed declaratively through a rich policy language. We demonstrate the viability of this approach by instrumenting nginx, an industrial-strength web server and reverse proxy. While this instrumentation takes only a single line of code, we argue that even this effort can be avoided by suitable C runtime code. We show that Downright's overhead is substantial, halving nginx's perfomance, but propose measures for optimisation

Implementation of mercury biomonitoring in German adults using dried blood spot sampling in combination with direct mercury analysis

Venous blood is a preferred matrix for the determination of total mercury (Hg) in human biomonitoring but has some drawbacks such as the requirement for an uninterrupted cold chain for transport and storage and the need of medical personnel for sample collection. Therefore, we tested and implemented a simpler and less expensive method for measuring Hg in human blood using dried blood spots (DBS). For method development, we investigated the influence of different storage conditions (temperature, storage vessel, time) on DBS samples. For method validation, we compared DBS and venous blood and investigated whether DBS sampling is suitable for measuring Hg in the general population in countries with low Hg exposure such as Germany. Based on our results, we found that pre-cleaned glass tubes were most suitable for storage of DBS samples, as this allowed the samples to remain stable for at least 4~weeks even at high temperatures (40~°C). When comparing venous blood and DBS, a very good correlation (r = 0.95, p < 0.01, Spearman-Rho) and high precision of DBS (mean relative standard deviation 8.2% vs. 7.2% in venous blood samples) were observed. Comparing the recoveries of both matrices in different concentration ranges, the variation of the recoveries decreases with increasing Hg concentration. The mean recoveries also decreased with increasing Hg concentration. Overall, we found comparable results for DBS and venous~blood using direct Hg analysis. Furthermore, we demonstrated that DBS are suitable for Hg biomonitoring in the general population in Germany and improved the storage conditions for the DBS

Abdominal, perineal, and genital soft tissue reconstruction with pedicled anterolateral thigh perforator flaps

Background Pedicled perforator flaps have become a contemporary alternative to muscle flaps for soft tissue reconstruction as they have reduced donor site morbidity, avoid the need for microsurgical transfer, and are versatile and reliable. The anterolateral thigh (ALT) flap was first introduced as a free flap and has since gained popularity as a pedicled flap. Here we review our experience using pedicled ALT flaps for regional soft tissue reconstruction. Methods We retrospectively reviewed all patients who underwent loco-regional soft tissue reconstruction using pedicled ALT flaps between March 2014 and October 2018, with the goal of identifying potential applications of pedicled ALT flaps. The following aspects of each case were reviewed: patient demographics, defect location and size, comorbidities such as previous radiotherapy, flap details, clinical follow-up, and postoperative complications. Results Our analysis demonstrates the versatility of pedicled ALT flaps in a variety of indications to successfully cover large abdominal, perineal, and genital soft tissue defects. Depending on the patient’s needs to achieve more bulk or stability in the reconstruction, the ALT flap was individually tailored with underlying muscle or fascia. The average follow-up was 7 months (range: 3–13 months). Conclusions Pedicled ALT flaps are a valuable reconstructive option for soft tissue defects located within the pedicle’s range, from the lower abdomen to the perianal region. These flaps are usually raised from a non-irradiated donor site and are sufficient for covering extensive soft tissue defects. Three-dimensional reconstruction of the defect using pedicled ALT flaps allows for anatomical function and minor donor sites

Study protocol: short against long antibiotic therapy for infected orthopedic sites - the randomized-controlled SALATIO trials

BACKGROUND: Few studies address the appropriate duration of post-surgical antibiotic therapy for orthopedic infections; with or without infected residual implants. We perform two similar randomized-clinical trials (RCT) to reduce the antibiotic use and associated adverse events. METHODS: Two unblinded RCTs in adult patients (non-inferiority with a margin of 10%, a power of 80%) with the primary outcomes "remission" and "microbiologically-identical recurrences" after a combined surgical and antibiotic therapy. The main secondary outcome is antibiotic-related adverse events. The RCTs allocate the participants between 3 vs. 6 weeks of post-surgical systemic antibiotic therapy for implant-free infections and between 6 vs. 12 weeks for residual implant-related infections. We need a total of 280 episodes (randomization schemes 1:1) with a minimal follow-up of 12 months. We perform two interim analyses starting approximately after 1 and 2 years. The study approximatively lasts 3 years. DISCUSSION: Both parallel RCTs will enable to prescribe less antibiotics for future orthopedic infections in adult patients

Stimulation of leukotriene synthesis in intact polymorphonuclear cells by the 5-lipoxygenase inhibitor 3-oxo-tirucallic acid.

ABSTRACT Commercially available extracts from Boswellia serrata resin used as anti-inflammatory drugs or phytonutrients show paradoxical concentration-dependent potentiating and inhibitory actions on 5-lipoxygenase (5-LO) product synthesis in stimulated PMNs. In our attempt to characterize the stimulating constituents, we identified the tetracyclic triterpene 3-oxo-tirucallic acid (3-oxo-TA), which, in the range from 2.5 to 15 M, enhanced 5-LO product formation in ionophore-challenged polymorphonuclear cells (PMNs) (e.g., from 1981 Ϯ 177 to 3042 Ϯ 208 pmol at 10 M 3-oxo-TA), and initiated Ca 2ϩ mobilization, MEK-1/2 phosphorylation, 5-LO translocation, and 5-LO product formation in resting cells (534 Ϯ 394 pmol/ 5 ϫ 10 6 PMNs). In cell-free 5-LO assays, 3-oxo-TA acted only inhibitory (IC 50 value of about 3 M), demonstrating the pivotal role of intact cell structure for its activating property. In 3-oxo-TA-challenged PMNs, the mitogen-activated protein kinase kinase (MEK)-1/2 inhibitor PD098059 abolished 5-LO product formation, along with inhibition of MEK-1/2 phosphorylation and 5-LO translocation. The 3-acetoxy derivative of 3-oxo-TA acted like 3-oxo-TA in intact PMNs, whereas 3-hydroxy-TA barely stimulated MEK phosphorylation in resting cells and showed only inhibition on ionophore-induced 5-LO product synthesis. Steroid-type tetracycles neither induced 5-LO activation nor had enhancing or inhibitory effects. In summary, defined natural tetracyclic triterpenes, which act as inhibitors of the 5-LO in the cell-free assay, initiate 5-LO activation by a MEK-inhibitor sensitive mechanism and potentiate stimulated product synthesis in intact cells. Because TAs contribute significantly to the overall biological effects of B. serrata resin extracts, special precaution for standardization is recommended when using B. serrata preparations as drugs or dietary supplements. 5-Lipoxygenase (5-LO; EC 1.13.11.34) catalyzes the first two steps in the biosynthesis of leukotrienes and 5(S)-HETE from arachidonic acid. Leukotrienes and 5-oxo-eicosa-tetraenoic acid, a final metabolite from 5(S)-HETE The enzymatic activity of 5-LO, as well as its binding to other macromolecules, is regulated in a highly complex manner (for concise reviews on many aspects of 5-LO, products, and receptors, se