✳flâneur — a map of the web's best reading

systemd service sandboxing and security hardening 101

ctrl.blog · 1,213 words · saved by 1 readers

The systemd-analyze security command gives your systemd service units an automated security rating. This is a good starting point for security hardening.

Daniel Aleksandersen 2020-01-14 8-minute read Share systemd enable services to run with a whole suite of hardening and sandboxing features from the Linux kernel. Here’s how to get a quick security review of the services running on your system and how to go about hardening their security. The Linux kernel can filter and limit access to file systems, networks, devices, kernel capabilities and system calls (syscalls), and more. In this article, I’ll focus on sandboxing access to the file system as a simple introduction to systemd service security hardening. The systemd service security review too

Explore this link on the map →

saved by

related reading