corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0e265-8211-7371-a3f8-b218cb23b432

Desktop Linux Hardening

privsec.dev · published 17 August 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at privsec.dev Wayback capture
3blogs citing
First cited
29 Jun 2023
Most recent
30 Nov 2025
Rank this month
not ranked
Links from this post
144
Words captured
5,540

Cited by

Blog
In the post
Date
shampan.xyz
Desktop Read at the source ↗
30 Nov 2025
notashelf.dev
NixOS Security I: Systemd Read at the source ↗
3 Mar 2025
Hello from Dmytro Zharii | Dmytro Zharii
Links from my inbox 2023-06-28 Read at the source ↗
29 Jun 2023

Links from this post

Link
Host
https://en.wikipedia.org/wiki/Disk_partitioning
en.wikipedia.org
https://en.wikipedia.org/wiki/File_system
en.wikipedia.org
https://wiki.archlinux.org/title/Dm-crypt/Swap_encryption
wiki.archlinux.org
https://wiki.archlinux.org/title/Swap
wiki.archlinux.org
https://en.wikipedia.org/wiki/Memory_paging
en.wikipedia.org
https://fedoraproject.org/wiki/Changes/SwapOnZRAM
fedoraproject.org
https://en.wikipedia.org/wiki/NetworkManager
en.wikipedia.org
https://madaidans-insecurities.github.io/guides/linux-hardening.html
madaidans-insecurities.github.io
https://dnf.readthedocs.io/en/latest/conf_ref.html
dnf.readthedocs.io
https://fedoraproject.org/wiki/Changes/DNF_Better_Counting
fedoraproject.org
https://coreos.github.io/rpm-ostree/countme/
coreos.github.io
https://en.opensuse.org/openSUSE:Statistics
en.opensuse.org
https://zorin.com/legal/privacy/
zorin.com
https://snapcraft.io/docs/snap-store-metrics
snapcraft.io
https://github.com/PrivSec-dev/privsec.dev/blob/main/content/posts/linux/Desktop%20Linux%20Hardening.md
github.com
https://github.com/PrivSec-dev/privsec.dev/discussions
github.com
https://www.whonix.org/wiki/Keystroke_Deanonymization
whonix.org
https://github.com/vmonaco/kloak
github.com
https://www.kicksecure.com/wiki/Packages_for_Debian_Hosts
kicksecure.com
https://aur.archlinux.org/packages/kloak-git
aur.archlinux.org
https://flatpak.org
flatpak.org
https://docs.flatpak.org/en/latest/sandbox-permissions.html
docs.flatpak.org
https://madaidans-insecurities.github.io/linux.html
madaidans-insecurities.github.io
https://docs.flatpak.org/en/latest/flatpak-command-reference.html
docs.flatpak.org
https://github.com/tchx84/Flatseal
github.com
https://wayland.freedesktop.org/xserver.html
wayland.freedesktop.org
https://en.wikipedia.org/wiki/Unix_domain_socket
en.wikipedia.org
https://docs.flatpak.org/en/latest/portal-api-reference.html
docs.flatpak.org
https://github.com/flathub/org.videolan.VLC/blob/master/org.videolan.VLC.yaml
github.com
https://snapcraft.io/docs/snap-confinement
snapcraft.io
https://firejail.wordpress.com/
firejail.wordpress.com
https://en.wikipedia.org/wiki/Setuid
en.wikipedia.org
https://en.wikipedia.org/wiki/Privilege_escalation
en.wikipedia.org
https://github.com/netblue30/firetools
github.com
https://firejail.wordpress.com/documentation-2/x11-guide/
firejail.wordpress.com
https://en.wikipedia.org/wiki/Mandatory_access_control
en.wikipedia.org
https://github.com/SELinuxProject/selinux
github.com
https://gitlab.com/apparmor/apparmor
gitlab.com
https://get.opensuse.org/tumbleweed/
get.opensuse.org
https://microos.opensuse.org/
microos.opensuse.org
https://wiki.archlinux.org/title/AppArmor
wiki.archlinux.org
https://github.com/containers/bubblewrap
github.com
https://docs.kernel.org/userspace-api/seccomp_filter.html
docs.kernel.org
https://github.com/krathalan/apparmor-profiles
github.com
https://github.com/roddhjav/apparmor.d
github.com
https://github.com/noatsecure/hardhat-selinux-templates
github.com
https://sr.ht/~seirdy/bwrap-scripts
sr.ht
https://www.docker.com/
docker.com
https://podman.io/
podman.io
https://gvisor.dev/
gvisor.dev
https://katacontainers.io/
katacontainers.io
https://ubuntu.com/pro
ubuntu.com
https://ubuntu.com/security/livepatch
ubuntu.com
https://ubuntu.com/security/livepatch/docs/livepatch/reference/kernels
ubuntu.com
https://ubuntu.com/kernel/lifecycle
ubuntu.com
https://wiki.archlinux.org/title/Umask
wiki.archlinux.org
https://meltdownattack.com/
meltdownattack.com
https://wiki.debian.org/SourcesList
wiki.debian.org
https://guix.gnu.org/en/download/
guix.gnu.org
https://gitlab.com/nonguix/nonguix
gitlab.com
https://www.phoronix.com/news/GNU-Linux-Libre-5.13
phoronix.com
https://fwupd.org/
fwupd.org
https://gitlab.gnome.org/World/gnome-firmware
gitlab.gnome.org
https://wiki.archlinux.org/title/systemd/Timers
wiki.archlinux.org
https://wiki.archlinux.org/title/Cron
wiki.archlinux.org
https://en.wikipedia.org/wiki/Firewall_(computing
en.wikipedia.org
https://firewalld.org/
firewalld.org
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/using-and-configuring-firewalld_configuring-and-managing-networking
access.redhat.com
https://wiki.ubuntu.com/UncomplicatedFirewall
wiki.ubuntu.com
https://netfilter.org/
netfilter.org
OpenSnitch Read at the source ↗
github.com
https://safing.io/portmaster/
safing.io
https://wiki.archlinux.org/title/Kernel_parameters
wiki.archlinux.org
https://www.kicksecure.com/wiki/Debian
kicksecure.com
https://github.com/sangam14/CloudNativeLab/blob/master/LXC/Linux%20Containers/User_namespaces.md
github.com
https://github.com/TommyTran732/Linux-Setup-Scripts/blob/main/etc/sysctl.d/99-workstation.conf
github.com
https://www.kernel.org/doc/html/latest/admin-guide/kernel-parameters.html
kernel.org
https://en.wikipedia.org/wiki/Simultaneous_multithreading
en.wikipedia.org
https://github.com/anthraxx/linux-hardened/issues/37
github.com
https://forums.whonix.org/t/kernel-hardening/7296/493
forums.whonix.org
https://en.wikipedia.org/wiki/RDRAND
en.wikipedia.org
https://arstechnica.com/gadgets/2019/10/how-a-months-old-amd-microcode-bug-destroyed-my-weekend/
arstechnica.com
https://systemd.io/RANDOM_SEEDS/
systemd.io
https://lore.kernel.org/lkml/20220605171539.417872-1-Jason@zx2c4.com/T/
lore.kernel.org
https://news.ycombinator.com/item?id=33223232
news.ycombinator.com
https://github.com/NixOS/nixpkgs/pull/165355
github.com
https://en.wikipedia.org/wiki/DMA_attack
en.wikipedia.org
https://github.com/Kicksecure/security-misc/blob/master/etc/default/grub.d/40_enable_iommu.cfg
github.com
https://github.com/PrivSec-dev/privsec.dev/pull/81
github.com
https://vfio.blogspot.com/2014/08/iommu-groups-inside-and-out.html
vfio.blogspot.com
IOMMU introduction Read at the source ↗
terenceli.github.io
intel IOMMU driver analysis Read at the source ↗
terenceli.github.io
https://mjg59.dreamwidth.org/54433.html
mjg59.dreamwidth.org
https://github.com/secureblue/secureblue/blob/live/files/system/etc/modprobe.d/blacklist.conf
github.com
https://wiki.archlinux.org/title/Kernel_module
wiki.archlinux.org
https://github.com/Kicksecure/security-misc/blob/master/usr/lib/systemd/system/proc-hidepid.service
github.com
https://github.com/Kicksecure/security-misc/blob/master/usr/lib/systemd/system/hide-hardware-info.service
github.com
https://github.com/anthraxx/linux-hardened
github.com
https://wiki.archlinux.org/title/security
wiki.archlinux.org
https://grsecurity.net/
grsecurity.net
https://github.com/GrapheneOS/hardened_malloc
github.com
https://www.kicksecure.com/wiki/Hardened_Malloc
kicksecure.com
https://copr.fedorainfracloud.org/coprs/secureblue/hardened_malloc/
copr.fedorainfracloud.org
https://github.com/divestedcg/rpm-hardened_malloc
github.com
https://grapheneos.social/@Tommy/112274772803550392
grapheneos.social
https://wiki.archlinux.org/title/Security
wiki.archlinux.org
https://man7.org/linux/man-pages/man8/mount.8.html
man7.org
https://www.chromium.org/chromium-os/developer-library/guides/security/noexec-shell-scripts/
chromium.org
https://docs.fedoraproject.org/en-US/fedora-silverblue/toolbox/
docs.fedoraproject.org
https://github.com/Kicksecure/security-misc/blob/master/usr/lib/systemd/system/permission-hardener.service
github.com
https://github.com/Kicksecure/security-misc/tree/master/etc/permission-hardener.d
github.com
https://www.icann.org/resources/pages/dnssec-what-is-it-why-important-2019-03-05-en
icann.org
https://www.whonix.org/wiki/Alternative_DNS_Resolver
whonix.org
https://en.wikipedia.org/wiki/Network_Time_Protocol
en.wikipedia.org
https://fedoramagazine.org/secure-ntp-with-nts/
fedoramagazine.org
https://github.com/Kicksecure/sdwdate
github.com
https://chrony-project.org/doc/4.4/chrony.conf.html
chrony-project.org
https://github.com/GrapheneOS/infrastructure/blob/main/etc/chrony.conf
github.com
https://wiki.archlinux.org/title/PAM
wiki.archlinux.org
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_authentication_and_authorization_in_rhel/configuring-user-authentication-using-authselect_configuring-authentication-and-authorization-in-rhel
access.redhat.com
https://www.man7.org/linux/man-pages/man8/pam_tally2.8.html
man7.org
https://github.com/Yubico/pam-u2f
github.com
https://wiki.archlinux.org/title/Universal_2nd_Factor
wiki.archlinux.org
https://www.srlabs.de/bites/usb-peripherals-turn
srlabs.de
https://hak5.org/products/usb-rubber-ducky
hak5.org
https://usbguard.github.io
usbguard.github.io
https://wiki.archlinux.org/title/USBGuard
wiki.archlinux.org
https://blog.lizzie.io/preventing-usb-attacks-with-linux-hardened.html
blog.lizzie.io
https://en.wikipedia.org/wiki/Unified_Extensible_Firmware_Interface
en.wikipedia.org
https://wiki.ubuntu.com/UEFI/SecureBoot
wiki.ubuntu.com
https://wiki.ubuntu.com/Initramfs
wiki.ubuntu.com
https://en.wikipedia.org/wiki/Evil_maid_attack
en.wikipedia.org
https://github.com/ventoy/Ventoy/issues/135
github.com
https://forums.lenovo.com/t5/Other-Linux-Discussions/Reports-of-custom-secure-boot-keys-bricking-recent-X-P-and-T-series-laptops/m-p/5105571
forums.lenovo.com
https://github.com/Foxboron/sbctl
github.com
https://github.com/Foxboron/sbctl/blob/master/README.md
github.com
https://wiki.archlinux.org/title/Unified_kernel_image
wiki.archlinux.org
https://haavard.name/2022/06/22/full-uefi-secure-boot-on-fedora-using-signed-initrd-and-systemd-boot/
haavard.name
https://wiki.archlinux.org/title/Dracut
wiki.archlinux.org
https://wiki.archlinux.org/title/Mkinitcpio
wiki.archlinux.org
https://uapi-group.org/specifications/specs/linux_tpm_pcr_registry/
uapi-group.org
https://source.android.com/security/verifiedboot
source.android.com
https://support.google.com/chromebook/answer/3438631
support.google.com
https://docs.microsoft.com/en-us/windows/security/information-protection/secure-the-windows-10-boot-process
docs.microsoft.com