linux-security Archives - Page 2 of 7 - ITFROMZERO

Installing and Configuring Linux Auditd on CentOS Stream 9: Comprehensive Security Event Monitoring

By IT From Zero October 18, 2026

A hands-on guide to deploying Linux Auditd on CentOS Stream 9: configuring kernel rules, tracking original users with auid, and analyzing incident logs via ausearch and aureport.

Security

How to Install and Configure Headscale: Self-Hosting a Tailscale Control Server for a Zero Trust VPN

By IT From Zero October 18, 2026

A comprehensive guide to self-hosting a Headscale control server to manage an independent Tailscale VPN, secure all metadata, and interconnect devices under Zero Trust.

Docker

Writing Custom Docker Seccomp Profiles: Hardening System Calls from Dev to Prod

By IT From Zero October 15, 2026

How to build custom Docker Seccomp profiles using a Default Deny model. Learn to profile syscalls with strace, configure OCI-compliant JSON, and debug violations via Auditd.

Centos

Comprehensive Guide to Installing and Configuring Wazuh SIEM on CentOS Stream 9

By IT From Zero October 12, 2026

Battle-tested guide to deploying Wazuh SIEM on CentOS Stream 9: from a 5-minute all-in-one setup and firewalld rules to FIM alerts and automatic SSH brute-force IP blocking.

Centos

Configuring LUKS and Clevis/Tang on CentOS Stream 9: Automatic Disk Encryption (NBDE)

By IT From Zero October 8, 2026

A guide to configuring Network-Bound Disk Encryption (NBDE) on CentOS Stream 9 using LUKS, Clevis, and Tang server. Servers automatically unlock their disks on boot within the internal network, no manual passphrase needed — ideal for DevOps environments and compliance requirements.

Centos

How to Configure Two-Factor Authentication (2FA) for SSH on CentOS Stream 9 with Google Authenticator and PAM

By IT From Zero October 2, 2026

A step-by-step guide to setting up two-factor authentication (2FA) for SSH on CentOS Stream 9 using Google Authenticator and PAM. Combining SSH keys with TOTP OTP keeps your server secure even if private keys are compromised.

Security

Securing Sudo with 2FA: The Final Defense Against Root Hijacking

By IT From Zero September 23, 2026

Hackers have your password but not your phone? They'll be stopped in their tracks. A guide to adding a 2FA layer to sudo for ultimate root protection on Linux.

Python

Building Your Own Linux Malware Scanner: Lightweight, Fast, and Flexible with Python & YARA

By IT From Zero September 19, 2026

Don't let malware slow down your server. Learn how to build a lightweight and effective malware scanner using Python and YARA, complete with Telegram alerts.

Security

Using systemd-analyze security to Harden Linux Services: From 9.6 to 2.0 in 5 Minutes

By IT From Zero September 12, 2026

Don't let your services run with loose root privileges. Learn how to use systemd-analyze security to score and harden Linux service security in a few simple steps.

Security

Protecting SSH Keys with TPM 2.0 on Linux: Private Keys That Can’t Be Stolen Even with Root Access

By IT From Zero September 8, 2026

A practical guide to protecting SSH private keys with TPM 2.0 on Linux: keys are stored inside the hardware chip and cannot be stolen even if an attacker has root access. Covers installing tpm2-pkcs11, generating keys inside the TPM, and configuring SSH with PKCS11Provider so no key file ever touches disk.