Linux Audit

Linux security and system management blog

Linux Audit is one of the few blogs dedicated to Linux security. We aim for high-quality articles to explain security concepts and how they apply to Linux systems.

Interested in a particular subject or want to look around? The glossary might be a great start.

Stay up-to-date and the RSS/Atom feed to your RSS reader (e.g. Thunderbird)!

Did you know?

You can see wich processes are using a mount point and block unmounting it

Also 💙 the command-line or terminal? Have a look at the command-line tips.

Latest articles

OpenSMTPD hardening profile

Tighten the already secure OpenSMTPD software on Linux by using this predefined profile that uses the systemd sandboxing options.

pacman cheat sheet

Cheat sheet for using the pacman package manager on Linux systems, including common tasks that are to be performed with pacman.

How to reload or restart a systemd service?

Services that are controlled with systemd can be reloaded or restarted depending on their configuration. Use systemctl to perform the related restart tasks.

How to check if a systemd service is enabled?

Systemd units can be enabled or disabled based on multiple factors, such as meeting specific dependencies. Learn how to see if a systemd service is enabled.

How to set environment variables in a systemd unit?

Systemd units can be configured to contain environment variables and passed along to the underlying application. Learn how to configure this unit setting.

Frequently Asked Questions

When it comes to Linux, there is so much to ask, like:

• How to see CPU details
• What is systemd?
• How to see errors and dropped packets on a network interface on Linux

Multiple sections within this site cover the frequently asked questions for Linux and Linux security.

• Data processing
• Linux file systems
• Hardware
• Kernel
• Networking
• Package manager
• Processes
• SSH
• System administration
• Systemd

Recent changes

• Linux Audit » Website information
• Cheat sheets for Linux » ip cheat sheet
• Systemd » Systemd commands
• Settings for systemd units » ProtectHome setting
• Settings for systemd units » ProcSubset setting
• Settings for systemd units » ProtectClock setting
• Settings for systemd units » ProtectSystem setting
• Settings for systemd units » NoExecPaths setting
• Settings for systemd units » NoNewPrivileges setting
• Settings for systemd units » LockPersonality setting
• Settings for systemd units » RestrictNamespaces setting
• systemd settings » Settings for systemd units
• Settings for systemd units » ProtectKernelModules setting
• Settings for systemd units » ProtectKernelLogs setting
• Settings for systemd units » ReadWritePaths setting
• Settings for systemd units » InaccessiblePaths setting
• Settings for systemd units » SystemCallFilter setting
• Settings for systemd units » DevicePolicy setting
• Settings for systemd units » SocketBindAllow setting
• Settings for systemd units » ProtectControlGroups setting
• Settings for systemd units » ExecPaths setting
• Settings for systemd units » SystemCallArchitectures setting
• Settings for systemd units » ProtectKernelTunables setting
• Settings for systemd units » RestrictRealtime setting
• Settings for systemd units » RuntimeDirectoryMode setting

Topics