linux-security – ITFROMZERO – Share tobe shared!

Building Your Own Linux Malware Scanner: Lightweight, Fast, and Flexible with Python & YARA

By admin September 19, 2026

Don't let malware slow down your server. Learn how to build a lightweight and effective malware scanner using Python and YARA, complete with Telegram alerts.

Security

Using systemd-analyze security to Harden Linux Services: From 9.6 to 2.0 in 5 Minutes

By admin September 12, 2026

Don't let your services run with loose root privileges. Learn how to use systemd-analyze security to score and harden Linux service security in a few simple steps.

Security

Protecting SSH Keys with TPM 2.0 on Linux: Private Keys That Can’t Be Stolen Even with Root Access

By admin September 8, 2026

A practical guide to protecting SSH private keys with TPM 2.0 on Linux: keys are stored inside the hardware chip and cannot be stolen even if an attacker has root access. Covers installing tpm2-pkcs11, generating keys inside the TPM, and configuring SSH with PKCS11Provider so no key file ever touches disk.

Fedora

Self-Hosting a Postfix & Dovecot Mail Server on Fedora: Maximum Security with SSL and SELinux

By admin September 6, 2026

Step-by-step guide to installing Postfix and Dovecot on Fedora Server. Detailed instructions on SSL, DNS, and SELinux configuration to keep your mail out of spam.

Security

Systemd Hardening: Securing Services with ProtectSystem, ProtectHome, and PrivateTmp

By admin September 3, 2026

systemd ships with powerful built-in hardening features — ProtectSystem, ProtectHome, and PrivateTmp — that isolate services at the kernel level with no extra software required. This guide covers practical configuration steps and how to verify effectiveness with systemd-analyze security.

Centos

Installing Linux Malware Detect (LMD) with ClamAV on CentOS Stream 9: Protecting Your Web Server from Malware

By admin September 1, 2026

A practical guide to installing and configuring Linux Malware Detect (LMD) with ClamAV on CentOS Stream 9 for automated malware detection and quarantine on your web server. Covers installation, automated scan configuration, ClamAV engine integration, real-world testing, and log monitoring.

Ubuntu

Full Disk Encryption with TPM 2.0 on Ubuntu 24.04: Security Without the Hassle

By admin August 28, 2026

Forget about typing your LUKS password every time you boot. This guide shows you how to leverage TPM 2.0 to automate drive unlocking on Ubuntu 24.04 LTS while maintaining top-tier security.

Security

Runtime Security Monitoring with Tracee: The eBPF ‘Magic Eye’ for Linux Systems

By admin August 25, 2026

Hackers using fileless malware or container escapes? Don't worry, Tracee with the power of eBPF helps you capture every anomaly on Linux with high performance.

Network

Mastering testssl.sh: The Ultimate SSL/TLS Vulnerability Scanner for Linux

By admin August 25, 2026

Don't let the 'green padlock' fool you. Learn how to use testssl.sh for comprehensive SSL/TLS vulnerability testing and secure Web Server configuration.

Security

Tlog Guide: The “Security Camera” for Recording Every Linux Terminal Session

By admin August 20, 2026

Forget .bash_history; tlog is the real security auditing tool for Linux. Record entire Terminal sessions and replay them like video for absolute system control.