New answers tagged security
0
votes
in arm64 linux, when linux is to be run in EL2 (bootloader in EL3), do I have to set something for this during kernel build?
When we use u-boot as bootloader, (I think it will be the same if we do it using UEFI and grub, or arm reference design) the bootloader runs at EL3 and at the final code sets the elr (address to ...
- 305
0
votes
Selinux php-fpm httpd and mariadb socket connection
I can confirm that this happens with MariaDB 10.6 on AlmaLinux 9 and that the SELinux policy posted by @Brian works.
1
vote
How Does Linux Generate Random Numbers on Startup
Lack of entropy has been a problem, especially for older operating
systems where there was no random device or other such API available, or
for cloud or cloned operating systems that might all have ...
- 33k
1
vote
Accepted
Firejail --private can't launch .sh file in home directory
From man firejail:
--private
Mount new /root and /home/user directories in temporary filesystems.
All modifications are discarded when the sandbox is closed.
Example:
$ firejail --private firefox
--...
- 26.6k
1
vote
Should I remove ICMP Protocol from firewall rules base on security concern?
There's been many discussions around ICMP allowing leaking type of messages. However, it was strengthen in ICMPv6 which would mean that all the CVE about those messages are probably obsolete (see CVE ...
- 2,419
0
votes
How does Linux Manage the Termination of Sessions?
Linux doesn't decide to terminate sessions because of the *.conf files. While logins are at the limit, Linux simply refuses new sessions.
- 1,725
0
votes
Is there a better way to prevent other device access to IPv6/IPv4:80 on network?
iptables -I INPUT -p tcp --dport 80 -j DROP
ip6tables -I INPUT -p tcp --dport 80 -j DROP
- 498
0
votes
Is there a better way to prevent other device access to IPv6/IPv4:80 on network?
If you use firewalld or ufw, rules will be applied to both IPv4 and IPv6. You will not have to handle them separately.
ufw might be simpler and easier to learn.
firewalld runs a process which uses ...
- 45.3k
1
vote
Weird network traffic on Ubuntu 22.04
Try using iptables instead of ufw.
UFW works at the software level, where IPTables works at the kernel level:
Run these commands in a terminal:
/sbin/iptables -A INPUT -p tcp -m multiport --dports ...
- 26
1
vote
How DM-Verity works?
Disclaimer: I'm no expert but sharing what I've learned as I set up dm-verity on a RPi. I'll try to address questions 1 and 2.
Considering the explanations of dm-verity that I have found that ...
- 233
0
votes
Accepted
What causes "Network Change Was Detected" warning on a machine with static IP?
This issue continued occurring, until I happen to find that Disabling IPv6 had worked on ubuntu.
I have disabled my IPv6 (it was set to automatic) & I have not seen this problem occur since the ...
- 815
Top 50 recent answers are included