Postfix Hardening Guide for Security and Privacy

Postfix Security and Privacy Postfix is one of the most used components on a server that needs to receive or send emails. With all its options available, it is easy to have a weak configuration. This security guide looks into Postfix hardening, to increase the defenses against spam, abuse, and leaking sensitive data. Time to start! Guide overview Why Postfix hardening Preparation Test the existing Postfix configuration Backup your Postfix configuration Find your Postfix version Hardening steps Basic hardening Disable VRFY [...]

The post Postfix Hardening Guide for Security and Privacy appeared first on Linux Audit.

from Postfix Hardening Guide for Security and Privacy

Troubleshooting guide for Lynis

Troubleshooting Lynis This document helps with solving most common issues experienced when running Lynis. Lynis error: no hostid and/or hostid2 found Some systems do not have the OpenSSH server package installed. In this case, the hostid2 value may be ...

from Troubleshooting guide for Lynis

Locking users after X failed login attempts with pam_tally2

Using pam_tally2 on Linux Most Linux distributions use pluggable authentication modules (PAM). This modular type of configuration allows system administrators to configure and fine-tune the authentication of users. It also defines the behavior on speci...

from Locking users after X failed login attempts with pam_tally2

GDPR Compliance: Technical Requirements for Linux Systems

GDPR for Linux systems What is GDPR? The General Data Protection Regulation is a regulation to protect data stored about individuals from the European Union. When speaking about stored data, it includes the handling of data at any given time, from entry to data deletion. One of the important parts is that individuals have the right to request the data stored about them and the right to get that data erased. You may know this from the “right to be forgotten” [...]

The post GDPR Compliance: Technical Requirements for Linux Systems appeared first on Linux Audit.

from GDPR Compliance: Technical Requirements for Linux Systems

Changing file permissions on macOS (and using flags)

Using file flags on macOS While performing system hardening on macOS, you may encounter a typical chmod error. Something like this: chmod: Unable to change file mode on /usr/bin/gcc: Operation not permitted Even with root permissions, you can’t change the permissions of some files. How is this possible? This is caused by flags. Showing file permissions and flags To see if a file has any flags set, use the ls command with the l (el) and O (capital o). ls -lO /usr/bin/gcc [...]

The post Changing file permissions on macOS (and using flags) appeared first on Linux Audit.

from Changing file permissions on macOS (and using flags)

Show vulnerable packages on Arch Linux with arch-audit

Vulnerable Software Packages on Arch Linux Vulnerabilities happen and are usually fairly quickly fixed. This is also true for Arch Linux. This rolling distribution can be considered to be always up-to-date, as it uses the latest versions of software packages from the upstream. When there is an update, it doesn’t take long that is becomes available in the package manager pacman. One problem that remained was the inability to quickly test if you have any vulnerable packages. After all running pacman -Suy daily [...]

The post Show vulnerable packages on Arch Linux with arch-audit appeared first on Linux Audit.

from Show vulnerable packages on Arch Linux with arch-audit

When should you do a penetration test?

Penetration Testing and Linux The information security field is filled with all kind of tests and assessments. One of them is the penetration test, also abbreviated to pentest or pen test. Last years, many security consultancy firms offer this test as part of their security services. So what is it really and when should you undergo a penetration test? Continue reading! What is a pentest? The short question to what a penetration is: a hack attack on your environment, executed by [...]

The post When should you do a penetration test? appeared first on Linux Audit.

from When should you do a penetration test?