Collaborate Disseminate
I am trying to develop a custom plugin for Lynis and followed the instructions here:
I created a custom plugin from the plugin template (custom_plugin.template)
I provided a test name and registered the plugin using the nam… Continue reading How to enable custom Lynis plugins
We are upgrading to RHEL 7.6. My Nessus scanner is giving me the following message:
2.2.3.c-d Mandatory Review Required: Find unauthorized SUID/GUID System Executables
RHEL7 SSGv0.1 2.2.3 Unauthorized SUID/GUID executables
/u… Continue reading RHEL7 SSGv0.1 2.2.3 Unauthorized SUID/GUID executables
Leather hardening has been around for such a long time that one might think that there was little left to discover, but [Jason F. Timmermans] certainly showed that is not the case. Right around the end of 2018 he set up experiments to compare different techniques for hardening leather, and …read more
Continue reading Loads of Testing Yields New, Reliable, and Cheap Leather Hardening Technique
I am hardening CentOS/RHEL 7.6. The hardening documents recommend disabling the automounter, “unless it is necessary.”
Why is autofs such a problem?
One of the benefits of networking is a shared file system. What other alternatives are the… Continue reading Why is autofs insecure?
I want to use my laptop to connect to a public WiFi in a library but…
I have strong security in my Windows host machine (comodo firewall using a public network settings and rules, protocols disabled, limited privileges acc… Continue reading Can I use a virtual machine to connect to a public WIFI to use Internet by totally isolating the host from it?
A comment from another user had me thinking. What are some well-known (or perhaps not quite so) examples of in-the-wild “malicious” software that do nothing actually malicious, but instead takes advantage of security vulnerab… Continue reading What are some examples of viruses/exploits with benevolent purposes?
I am somewhat administering an old Windows Server 2008 server that is used to host a older Video Game.
It’s in such a state that it has tons of custom code on it that run the server and hasn’t really been maintained.
We rec… Continue reading Steps to Harden Ancient Gaming Server
I generally zero out memory the moment it’s served its usefulness, but only with heap-allocated chunks. Is it a sin (or overkill) to do the same with arguments and stack values? Thanks in advance.
Edit:
Here’s an example of what I mean… Continue reading Is zeroing out values on the stack and arguments overkill?
I have several directories on my Mac, two most popular examples are:
~/.aws
~/.ssh
They can be read by any script file or third-party app in system.
I do not see a way to protect them in macOS (and in Linux). Mechanisms… Continue reading How to protect certain macOS user directory from unauthorized access?
I’ve got a service running inside a docker container. I’ve built my own image based on nginx:stable-alpine docker image.
I am trying to ascertain whether the concept of CIS hardening applies to the container itself or just the host OS whe… Continue reading CIS hardening of alpine based docker container