NetBay journal

Linux Security

14 practical Linux Security articles from Netbay Engineering — written for operators running Linux and Windows VPS in India.

14 articles in this topic

Subscribe via RSS

Process Isolation and Container Hardening Fundamentals

Apply namespaces, cgroups, and seccomp to harden containers and isolated processes on Linux, reducing the blast radius of any single workload.

Linux SecurityAugust 27, 20268 min read

Managing File Integrity with AIDE (Tripwire-Style)

Deploy AIDE to hash and snapshot critical files, detect tampering, and answer "was this file changed against policy" with a defensible audit trail.

Linux SecurityAugust 18, 20266 min read

Detecting Brute-Force and Suspicious SSH Logins

Read auth logs like a security analyst, spot brute-force bursts and compromised accounts, and act on suspicious SSH login signals before they become a breach.

Linux SecurityAugust 4, 20267 min read

Automating Security Updates with unattended-upgrades

Deploy unattended-upgrades on Debian or dnf-automatic on Rocky so security patches install themselves without breaking your running services.

Linux SecurityJuly 21, 20266 min read

Kernel sysctl Hardening Checklist for a Public Server

Harden a Linux kernel against network abuse and privilege escalation by tuning the sysctl knobs that matter most for a public-facing internet VPS.

Linux SecurityJuly 7, 20267 min read

Malware Scanning with ClamAV and rkhunter on Linux

Detect file and rootkit infections on a Linux VPS by combining ClamAV signature scanning with rkhunter rootkit checks and disciplined scans.

Linux SecurityJune 23, 20266 min read

auditd: Auditing Events on Production Linux Servers

Deploy auditd to record who ran what on production, watch key files and syscalls, and turn the kernel audit log into usable, searchable incident evidence.

Linux SecurityJune 9, 20267 min read

Adding 2FA for SSH Logins with PAM, TOTP, and U2F

Require a second factor for SSH with TOTP via PAM or a hardware U2F key, without breaking key-only automation or locking out legitimate users.

Linux SecurityMay 26, 20267 min read

Managing Secrets on a VPS: Permissions, Env, Vault

Store API keys and tokens safely on a Linux VPS with strict file permissions, protected environment files, and vault basics that survive a leak.

Linux SecurityMay 12, 20267 min read

Writing sudoers Rules That Are Actually Least-Privilege

Replace blanket sudo with scoped sudoers entries: command allowlists, aliases, NOPASSWD, and runas restrictions that survive a security review.

Linux SecurityApril 28, 20267 min read

AppArmor vs SELinux: Mandatory Access Control Explained

Understand how AppArmor and SELinux confine processes under mandatory access control and choose the MAC layer that fits your distro and density.

Linux SecurityApril 15, 20268 min read

ufw vs firewalld vs nftables: Choosing a Server Firewall

Compare ufw, firewalld, and nftables for a Linux VPS and pick the right filtering layer for your distro, workflow, automation, and threat model.

Linux SecurityApril 2, 20267 min read