NetBay journal

Linux Security

18 practical Linux Security articles from Netbay Engineering — written for operators running Linux and Windows VPS in India.

18 articles in this topic

Subscribe via RSS

Protecting SSH with FIDO2 / U2F Hardware Keys on Linux

Eliminate credential theft by configuring OpenSSH hardware-backed ed25519-sk keys with mandatory touch verification and FIDO2 tokens.

Linux Security2026-10-178 min read

Automated Security Auditing with OpenSCAP on Linux Servers

Automate CIS benchmark compliance scanning, generate HTML remediation reports, and enforce security baselines using OpenSCAP and oscap.

Linux Security2026-10-147 min read

Hardening Linux Namespaces and POSIX Capabilities

Prevent privilege escalation by stripping unused POSIX capabilities, disabling unprivileged user namespaces, and enforcing Ambient Capabilities.

Linux Security2026-10-116 min read

Linux PAM Hardening: Multi-Factor Auth, Limits, and Lockouts

Secure Linux user authentication using Pluggable Authentication Modules (PAM) with Google Authenticator MFA, faillock brute-force protection, and limits.

Linux Security2026-10-085 min read

Process Isolation and Container Hardening Fundamentals

Apply namespaces, cgroups, and seccomp to harden containers and isolated processes on Linux, reducing the blast radius of any single workload.

Linux SecurityAugust 27, 20268 min read

Managing File Integrity with AIDE (Tripwire-Style)

Deploy AIDE to hash and snapshot critical files, detect tampering, and answer "was this file changed against policy" with a defensible audit trail.

Linux SecurityAugust 18, 20266 min read

Detecting Brute-Force and Suspicious SSH Logins

Read auth logs like a security analyst, spot brute-force bursts and compromised accounts, and act on suspicious SSH login signals before they become a breach.

Linux SecurityAugust 4, 20267 min read

Automating Security Updates with unattended-upgrades

Deploy unattended-upgrades on Debian or dnf-automatic on Rocky so security patches install themselves without breaking your running services.

Linux SecurityJuly 21, 20266 min read

Kernel sysctl Hardening Checklist for a Public Server

Harden a Linux kernel against network abuse and privilege escalation by tuning the sysctl knobs that matter most for a public-facing internet VPS.

Linux SecurityJuly 7, 20267 min read

Malware Scanning with ClamAV and rkhunter on Linux

Detect file and rootkit infections on a Linux VPS by combining ClamAV signature scanning with rkhunter rootkit checks and disciplined scans.

Linux SecurityJune 23, 20266 min read

auditd: Auditing Events on Production Linux Servers

Deploy auditd to record who ran what on production, watch key files and syscalls, and turn the kernel audit log into usable, searchable incident evidence.

Linux SecurityJune 9, 20267 min read

Adding 2FA for SSH Logins with PAM, TOTP, and U2F

Require a second factor for SSH with TOTP via PAM or a hardware U2F key, without breaking key-only automation or locking out legitimate users.

Linux SecurityMay 26, 20267 min read