PrivSec-dev/privsec.dev
1
0
Fork 0
mirror of https://github.com/PrivSec-dev/privsec.dev synced 2024-12-22 12:51:34 -05:00
Code

Link dump

Browse Source
This commit is contained in:
WfKe9vLwSvv7rN 2022-10-18 05:26:16 +00:00
parent ee1c9bed70
commit 5082a4d152
No known key found for this signature in database
GPG Key ID: 7ABFAFE6553B81BB
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
content/posts/linux/Desktop-Linux-Hardening.md
View File

@ -179,6 +179,21 @@ Another option is [Kata containers](https://katacontainers.io/), where virtual m
![opensuse-computer.jpg](/images/opensuse-computer.jpg)
<!--
### Requiring Package Managers to Use TLS (DRAFT)
- [Fedora Package Delivery Security](https://puiterwijk.org/posts/fedora-package-delivery-security/)
- Note that there is a `Repo-expire` field now, which presumably is what the author was saying didn't exist at the time
- [Attacks against GPG signed APT repositories](https://blog.packagecloud.io/attacks-against-gpg-signed-apt-repositories/)
- [Remote Code Execution in apt/apt-get](https://justi.cz/security/2019/01/22/apt-rce.html)
- [Why does DNF and zypper use HTTPS?](https://old.reddit.com/r/linux/comments/ain7uo/why_does_dnf_and_zypper_use_https/)
- https://askubuntu.com/a/146117
How to:
- [Fedora](https://old.reddit.com/r/Fedora/comments/86r5ya/how_do_i_switch_to_https_for_mirrors_for_fedora/dw7ery0/)
- [Kali](https://www.kali.org/blog/kali-linux-repository-https-support/) (same for all Ubuntu derivatives when supported)
-->
### Umask 077
If you are not using openSUSE, consider changing the default [umask](https://en.wikipedia.org/wiki/Umask) for both regular user accounts and root to 077. Changing umask to 077 can break snapper on openSUSE and is **not** recommended.