Linux Audit

Linux security and system management blog

Linux Audit is one of the few blogs dedicated to Linux security. We aim for high-quality articles to explain security concepts and how they apply to Linux systems.

Interested in a particular subject or want to look around? The glossary might be a great start.

Stay up-to-date and the RSS/Atom feed to your RSS reader (e.g. Thunderbird)!

Did you know?

You can quickly go to your home directory

Also 💙 the command-line or terminal? Have a look at the command-line tips.

Latest articles

Apache hardening profile

Harden the Apache web server configuration with the help of this predefined profile that implements systemd sandboxing capabilities and restricting resources.

pscap command

The Linux command pscap shows an overview of running processes and what capabilities they have, or if they have the full set (unrestricted).

netcap command

The Linux command netcap shows an overview of running processes and what capabilities they have. This applies to those that are using active network sockets.

filecap command

The Linux command filecap shows what capabilities binaries have, such as from your PATH variable, or scanning a particular file system.

captest command

The Linux command captest helps with testing capabilities and in particular to see if privilege escalation is possible.

Frequently Asked Questions

When it comes to Linux, there is so much to ask, like:

• How to see logging for a specific unit or service
• What is SSH?
• How to start and enable a unit with systemctl

Multiple sections within this site cover the frequently asked questions for Linux and Linux security.

• Data processing
• Linux file systems
• Hardware
• Kernel
• Networking
• Package manager
• Processes
• SSH
• System administration
• Systemd

Recent changes

• Linux Audit » Website information
• Website information » Latest changes
• System hardening » Linux hardening with sysctl settings
• Software » Understand and configure core dumps on Linux
• Kernel » Overview of Linux syscalls
• Linux capabilities » Overview of Linux capabilities
• Linux Audit » Contact details
• Kernel » Linux capabilities
• Commands » captest command
• Commands » netcap command
• Commands » pscap command
• Commands » filecap command
• Linux capabilities » Linux capabilities 101
• Settings for systemd units » LockPersonality setting
• Settings for systemd units » RestrictNamespaces setting
• systemd settings » Settings for systemd units
• Settings for systemd units » ProtectHome setting
• Settings for systemd units » ProcSubset setting
• Settings for systemd units » SystemCallFilter setting
• Settings for systemd units » DevicePolicy setting
• Settings for systemd units » ProtectClock setting
• Settings for systemd units » ProtectSystem setting
• Settings for systemd units » NoExecPaths setting
• Settings for systemd units » ExecPaths setting
• Settings for systemd units » SystemCallArchitectures setting

Topics