Hardening on unixawy.com | Security Blog /tags/hardening/ Recent content in Hardening on unixawy.com | Security Blog Hugo en-us Mon, 17 Aug 2015 03:42:42 +0000 Hardening Linux Boot: Securing GRUB, Single-User Mode, and Console Hotkeys /protect-bootsingle-user-mode/ Mon, 17 Aug 2015 03:42:42 +0000 /protect-bootsingle-user-mode/ How to prevent unauthorized local console takeovers on Linux by password-protecting GRUB, enforcing sulogin on single-user recovery mode, and disabling console reboot interrupts. Account Lockout on Failed Logins with pam_tally2 / pam_faillock /securelock-accounts-with-pam-tally2/ Wed, 05 Aug 2015 00:50:28 +0000 /securelock-accounts-with-pam-tally2/ How to configure PAM to automatically lock accounts after repeated failed login attempts across SSH, consoles, and TTYs using pam_tally2. Hardening Linux Passwords with pam_cracklib and pam_pwquality /password-policy-with-pam_cracklib/ Mon, 03 Aug 2015 18:33:37 +0000 /password-policy-with-pam_cracklib/ A practical guide to enforcing strict password complexity, dictionary checks, and immediate expiration across Linux accounts using pam_cracklib. Understanding Linux Pluggable Authentication Modules (PAM) /pluggable-authentication-modules/ Mon, 03 Aug 2015 16:51:56 +0000 /pluggable-authentication-modules/ A comprehensive guide to Linux Pluggable Authentication Modules (PAM): management groups, control flags, module stacks, and configuration architecture. Demystifying Linux umask: Calculating Default Permissions and System Hardening /umask-permissions-explanation/ Fri, 10 Jul 2015 07:16:00 +0000 /umask-permissions-explanation/ How the Linux umask (user mask) controls default permissions on newly created files and directories, binary bitmask calculation, and security hardening.