Tag: Security
All the articles with the tag "Security".

Central Logging
Updated:System logging should not remain a local activity. If you find your system has been compromised often the first thing in the attackers mind is to stop it f

Lynis Security Auditing
Updated:In the days of corporate lore I faced system hardening challenges driven by Nessus. Now because Nessus isn't FOSS (Free Open Source Software) it's not some

SSH, OATH OTP and LDAP
Updated:I got myself into a bit of a knot with this one. We wanted multi-factor authentication setup on the main SSH gateway and that meant private key, password A

Resetting the Root Password
Updated:I had to go through an exercise of accessing a number of a clients servers and reset the root password. They didn't have it documented anywhere and couldn'

One Time Password and SSHD
Updated:I made a bit of a fool of myself suggesting that we add a free means of securing our external SSH gateway by using Google Authenticator. My boss simply tur

mod_http_upload and CORS
Updated:Putting together a container set with movim and ejabberd I ran into CORS (Cross Origin Resource Sharing). I'm using the default upload url https://@HOST@/u

NFSv4 and IDMAPD
Updated:A simple task of installing Manjaro on my office PC turned into a running battle that burned away the day. When connecting to the NFS share for my home dri

USBGuard
Updated:Whilst locking down some workstation with usbguard I wanted to gain more of an insight into what devices I wanted to block or allow. For simple data leakag

OpenWrt Firewall
Updated:I've inherited a couple of OpenWrt firewalls that need some upgrades. They're not hugely outdated, only a major version behind. I need to figure out the up

LUKS Encryption and LVM
Updated:Setting up an encrypted boot volume is pretty straight forward at the time of installation. But what we wanted to do was add additional encrypted volumes e