Linux Audit
Latest posts
Nginx hardening profile
Introduction This is a hardening profile to help securing nginx by using systemd unit configuration. It’s goal is to restrict what nginx can do and make it harder for any possible vulnerability to be misused. The rationale for the selected settings is based on the analysis as part of the article Hardening nginx with systemd security features . Relevant FAQ: How to use systemctl edit to…
journalctl cheat sheet
Common journalctl options Long option Short option What the option does --catalog -x Show log lines with additional help or suggestions where available --disk-usage Show size of the archived and active journals --follow -f Track changes, like tail -f --lines= -n Show X number of lines (most recent) --output= -o Define what output format should be used for journal entries --pager-end -e Go to the…
Latest changes
This page contains the most recent changes to the blog.
Kernel hardening: Disable and blacklist Linux modules
The Linux kernel is modular, which makes it more flexible than monolithic kernels. New functionality can be easily added to a run kernel, by loading the related module. While that is great, it can also be misused. You can think of loading malicious modules (e.g. rootkits), or unauthorized access to the server and copy data via a USB port. In our previous article about kernel modules , we looked at…