linux-security Archives - ITFROMZERO

Configuring LUKS and Clevis/Tang on CentOS Stream 9: Automatic Disk Encryption (NBDE)

By IT From Zero October 8, 2026

A guide to configuring Network-Bound Disk Encryption (NBDE) on CentOS Stream 9 using LUKS, Clevis, and Tang server. Servers automatically unlock their disks on boot within the internal network, no manual passphrase needed — ideal for DevOps environments and compliance requirements.

Centos

How to Configure Two-Factor Authentication (2FA) for SSH on CentOS Stream 9 with Google Authenticator and PAM

By IT From Zero October 2, 2026

A step-by-step guide to setting up two-factor authentication (2FA) for SSH on CentOS Stream 9 using Google Authenticator and PAM. Combining SSH keys with TOTP OTP keeps your server secure even if private keys are compromised.

Security

Securing Sudo with 2FA: The Final Defense Against Root Hijacking

By IT From Zero September 23, 2026

Hackers have your password but not your phone? They'll be stopped in their tracks. A guide to adding a 2FA layer to sudo for ultimate root protection on Linux.

Python

Building Your Own Linux Malware Scanner: Lightweight, Fast, and Flexible with Python & YARA

By IT From Zero September 19, 2026

Don't let malware slow down your server. Learn how to build a lightweight and effective malware scanner using Python and YARA, complete with Telegram alerts.

Security

Using systemd-analyze security to Harden Linux Services: From 9.6 to 2.0 in 5 Minutes

By IT From Zero September 12, 2026

Don't let your services run with loose root privileges. Learn how to use systemd-analyze security to score and harden Linux service security in a few simple steps.

Security

Protecting SSH Keys with TPM 2.0 on Linux: Private Keys That Can’t Be Stolen Even with Root Access

By IT From Zero September 8, 2026

A practical guide to protecting SSH private keys with TPM 2.0 on Linux: keys are stored inside the hardware chip and cannot be stolen even if an attacker has root access. Covers installing tpm2-pkcs11, generating keys inside the TPM, and configuring SSH with PKCS11Provider so no key file ever touches disk.

Fedora

Self-Hosting a Postfix & Dovecot Mail Server on Fedora: Maximum Security with SSL and SELinux

By IT From Zero September 6, 2026

Step-by-step guide to installing Postfix and Dovecot on Fedora Server. Detailed instructions on SSL, DNS, and SELinux configuration to keep your mail out of spam.

Security

Systemd Hardening: Securing Services with ProtectSystem, ProtectHome, and PrivateTmp

By IT From Zero September 3, 2026

systemd ships with powerful built-in hardening features — ProtectSystem, ProtectHome, and PrivateTmp — that isolate services at the kernel level with no extra software required. This guide covers practical configuration steps and how to verify effectiveness with systemd-analyze security.

Centos

Installing Linux Malware Detect (LMD) with ClamAV on CentOS Stream 9: Protecting Your Web Server from Malware

By IT From Zero September 1, 2026

A practical guide to installing and configuring Linux Malware Detect (LMD) with ClamAV on CentOS Stream 9 for automated malware detection and quarantine on your web server. Covers installation, automated scan configuration, ClamAV engine integration, real-world testing, and log monitoring.

Ubuntu

Full Disk Encryption with TPM 2.0 on Ubuntu 24.04: Security Without the Hassle

By IT From Zero August 28, 2026

Forget about typing your LUKS password every time you boot. This guide shows you how to leverage TPM 2.0 to automate drive unlocking on Ubuntu 24.04 LTS while maintaining top-tier security.