linux-security – ITFROMZERO – Share tobe shared!

Mastering Cilium Tetragon: Monitoring and Blocking Runtime Attacks with eBPF

By admin August 9, 2026

A detailed guide on using Cilium Tetragon for monitoring and securing Linux Runtime based on eBPF technology. This article shares quick installation steps, how to write TracingPolicy, and real-world experience to protect servers from attacks.

Security

Setting Up a Tor Onion Service with Nginx: ‘Stealth’ Your Website on Linux

By admin August 9, 2026

A guide on setting up a Tor Onion Service with Nginx on Linux. Learn how to prevent IP leaks, secure headers, and apply OPSEC principles for a fully anonymous .onion website.

Security

Installing Technitium DNS Server on Linux: A Security ‘Shield’ and Ad-Blocker for DevOps

By admin August 9, 2026

A guide to installing Technitium DNS Server on Linux for DoH encryption, network-wide ad-blocking, and professional local DNS management for DevOps and SysAdmins.

Security

Deploying Zero Trust Mesh VPN with NetBird: How I Protected My Server from 50,000 Brute-force Attacks Nightly

By admin July 30, 2026

A guide to building a Zero Trust Mesh VPN with NetBird on Linux. A modern alternative to traditional VPNs for securing SSH and connecting servers safely without port forwarding.

Fedora

Fixing SELinux Errors on Fedora for Good: Use setroubleshoot and audit2allow Instead of Disabling It

By admin July 25, 2026

Stop disabling SELinux when encountering Permission Denied errors. Learn how to use setroubleshoot and audit2allow to fix AVC denied errors professionally on Fedora.

Fedora

User Management on Fedora: Time to Say Goodbye to /etc/passwd for systemd-homed

By admin July 15, 2026

Manage Fedora users more professionally with systemd-homed. A detailed guide on creating LUKS-encrypted users, limiting resources, and ultra-fast data migration.

Fedora

Configuring NBDE on Fedora with Clevis and Tang: Automatic LUKS Unlocking on Your Local Network

By admin July 13, 2026

A guide to configuring NBDE (Network-Bound Disk Encryption) on Fedora with Clevis and Tang to automatically unlock LUKS-encrypted drives on reboot within a local network, without manually entering a passphrase. Includes practical experience from 6 months of production use, plus how to handle Tang server unavailability.

Centos

Configuring Automatic Security Updates on CentOS Stream 9 with dnf-automatic: Auto-Patch Vulnerabilities and Get Email Notifications

By admin July 1, 2026

A guide to installing and configuring dnf-automatic on CentOS Stream 9 to automatically apply daily security updates. Includes email notification setup via Postfix and practical tips from real-world server management experience.

Security

How to Use LinPEAS to Automatically Discover Privilege Escalation Paths on Linux Servers

By admin July 1, 2026

LinPEAS is the most powerful bash script for privilege escalation scanning on Linux, automatically detecting SUID misconfigurations, dangerous sudo rules, exploitable cron jobs, and dozens of other escalation vectors. No installation required — just run it, and the color-coded output lets you identify risks in minutes.

Security

Using usbrip to Investigate USB Connection History on Linux: Detecting Physical Port Intrusions

By admin June 25, 2026

usbrip is a dedicated Python tool for investigating USB connection history on Linux, invaluable for forensics and incident response. This article compares three approaches to USB tracking, weighs the pros and cons, then walks through installing usbrip, building a whitelist, and automating unauthorized device detection with crontab.