systemd service sandboxing and security hardening 101
The systemd-analyze security command gives your systemd service units an automated security rating. This is a good starting point for security hardening.
Daniel Aleksandersen 2020-01-14 8-minute read Share systemd enable services to run with a whole suite of hardening and sandboxing features from the Linux kernel. Here’s how to get a quick security review of the services running on your system and how to go about hardening their security. The Linux kernel can filter and limit access to file systems, networks, devices, kernel capabilities and system calls (syscalls), and more. In this article, I’ll focus on sandboxing access to the file system as a simple introduction to systemd service security hardening. The systemd service security review too
saved by
related reading
- systemd for Administrators, Part 10pointer.net
- Everything I know about good system designseangoedecke.com
- systemd for Administrators, Part XIV0pointer.de
- Initial Server Setup with Ubuntu 20.04 | DigitalOceandigitalocean.com
- Top 22 Docker Security Best Practices: Ultimate Guideaquasec.com
- Firewalls | Computer Securitytextbook.cs161.org
- Flatpak - a security nightmareflatkill.org
- Tyblog | You Don't Love systemd Timers Enoughblog.tjll.net
- What is container threat detection? | Sysdigsysdig.com
- Sandbox SDKsandbox.cloudflare.com
- Sandboxing JavaScript Code — Andrew Healeyhealeycodes.com
- A student's dream: hacking (then fixing) Gradescope's autogradersaligrama.io