Last change: 2025-01-06
Harden Linux services using the systemd unit setting PrivateMounts, which gives the service the service its own mount namespace.
Mount articles
Last change: 2025-01-06
Harden system and users services, by defining if they are allowed to use specific syscalls or groups, with the use of systemd unit setting SystemCallFilter.
Last change: 2025-01-06
Which systemd unit types are available and what is their goal? In this article we cover them and show some useful commands related to these units.
Commands:
Last change: 2025-01-06
The pseudo-filesystem /proc contains a lot of useful information for the system administrator. With the hidepid option we can restrict what users can see.
Commands:
- cat
- groupadd
- mount
- ps
- top
Last change: 2025-01-06
Since data is stored on file systems, appropriate measures should be taken to protect it. Learn how to secure mount points on Linux.