SystemD Service Hardening
roguesecurity.dev
Discover additional security options for systemd units, to include quadlets. These options are everything from system permissions, time manage, BPF, syscall & seccomp filters, etc., all to make your system more secure.

cross-posted from: https://infosec.pub/post/32937284

This one is a little self-hosting specific, and more casual Linux best practices, but I’ve got a new blog post down for general security! Harden your systemd units (especially custom ones) for better peace of mind on the internet!

  • StarkZarn@infosec.pubOPEnglish
    2·
    1 month ago

    Good callout! You’re absolutely right, and here I was primarily focused on publicly accessible services. Thanks for the addition.