An open API service indexing awesome lists of open source software.

https://github.com/serverfarmer/sf-secure-kernel

sf-secure-kernel extension provides secure Linux kernel configuration.
https://github.com/serverfarmer/sf-secure-kernel

devops devops-tools linux linux-kernel security security-automation security-hardening security-tools sysctl sysctl-variables

Last synced: 11 months ago
JSON representation

sf-secure-kernel extension provides secure Linux kernel configuration.

Awesome Lists containing this project

README

          

sf-secure-kernel extension provides secure Linux kernel configuration,
including:

- protection from bogus ICMP packets from fake/vicious routers
- protection from SYN flood and small DDoS attacks
- logging bad packets
- RAM protection by turning off Firewire interface
- enforcing several standard protection mechanisms (eg. ASLR)
- restricting ptrace and dmesg for non-root users
- disabling core dumping by setuid/setgid programs

It is compatible with all supported Linux systems.