Skip to main content

analyze security

systemd-analyze security 

  /usr/bin/systemd-analyze security 

 

https://www.scip.ch/en/?labs.20200611

https://www.opensourcerers.org/2022/04/25/optimizing-a-systemd-service-for-security/

 

https://www.ctrl.blog/entry/systemd-service-hardening.html


strace -e trace=%file program  


disable core dump

nano /etc/security/limits.conf

* hard core 0
 
 
 # echo 'fs.suid_dumpable = 0' >> /etc/sysctl.conf 
 # sysctl -p   


  # echo 'ulimit -S -c 0 > /dev/null 2>&1' >> /etc/profile 


default umask

# nano /etc/profile

umask 027


Usb device toggle

lsusb 
lsusb -t
assign 'bus-port.Dev' number  
echo '2-1.1' > /sys/bus/usb/drivers/usb/unbind
 
to unload usb module
ls /lib/modules/`uname -r`/kernel/drivers/usb/storage 
# lsmod | grep -i usb-storage
modprobe -r uas
modprobe -r usb-storage
# modinfo usb-storage

# lsscsi -H
 
 
 
 vi /etc/modprobe.d/blacklist.conf
blacklist usb-storage
  
sudo vi /etc/modprobe.d/fake_usb.conf
Install usb - storage / bin / true
 
 
blacklist firewire
 
 nano /etc/modprobe.d/blacklist-firewire.conf
blacklist ohci1394
blacklist sbp2
blacklist dv1394
blacklist raw1394
blacklist video1394
#blacklist firewire-ohci
#blacklist firewire-sbp2
 
    
 
 
 

Comments

Popular posts from this blog

sxhkd volume andbrightness config for dwm on void

xbps-install  sxhkd ------------ mkdir .config/sxhkd cd .config/sxhkd nano/vim sxhkdrc -------------------------------- XF86AudioRaiseVolume         amixer -c 1 -- sset Master 2db+ XF86AudioLowerVolume         amixer -c 1 -- sset Master 2db- XF86AudioMute         amixer -c 1 -- sset Master toggle alt + shift + Escape         pkill -USR1 -x sxhkd XF86MonBrightnessUp          xbacklight -inc 20 XF86MonBrightnessDown          xbacklight -dec 20 ------------------------------------------------------------- amixer -c card_no -- sset Interface volume run alsamixer to find card no and interface names xbps-install -S git git clone https://git.suckless.org/dwm xbps-install -S base-devel libX11-devel libXft-devel libXinerama-devel  vim config.mk # FREETYPEINC = ${X11INC}/freetype2 #comment for non-bsd make clean install   cp config.def.h config.h vim config.h xbps-install -S font-symbola #for emoji on statusbar support     void audio config xbps-i

fix idm integration on chrome

Chrome Browser Integration I do not see IDM extension in Chrome extensions list. How can I install it?  How to configure IDM extension for Chrome? Please note that all IDM extensions that can be found in Google Store are fake and should not be used. You need to install IDM extension manually from IDM installation folder. Read in step 2 how to do it . 1. Please update IDM to the latest version by using  "IDM Help->Check for updates..."  menu item 2.  I don't see  "IDM Integration module"  extension in the list of extensions in  Chrome . How can I install it? Press on  Chrome  menu ( arrow 1  on the image), select  "Settings"  menu item ( arrow 2  on the image) and then select  "Extensions"  tab ( arrow 3  on the image). After this open IDM installation folder ( "C:\Program Files (x86)\Internet Download Manager"  by default,  arrow 4  on the image) and drag and drop  "IDMGCExt.crx"  ( arrow 5  on the image) file int

Hidden Wiki

Welcome to The Hidden Wiki New hidden wiki url 2015 http://zqktlwi4fecvo6ri.onion Add it to bookmarks and spread it!!! Editor's picks Bored? Pick a random page from the article index and replace one of these slots with it. The Matrix - Very nice to read. How to Exit the Matrix - Learn how to Protect yourself and your rights, online and off. Verifying PGP signatures - A short and simple how-to guide. In Praise Of Hawala - Anonymous informal value transfer system. Volunteer Here are five different things that you can help us out with. Plunder other hidden service lists for links and place them here! File the SnapBBSIndex links wherever they go. Set external links to HTTPS where available, good certificate, and same content. Care to start recording onionland's history? Check out Onionland's Museum Perform Dead Services Duties. Introduction Points Ahmia.fi - Clearnet search engine for Tor Hidden Services (allows you