Limit the impact of a security intrusion with systemd directives
OpenSMTPD recently had a critical remote code execution vulnerability. I look at how you can limit impact with systemd-service security directives.
Linux
Linux
systemd service sandboxing and security hardening 101
The systemd-analyze security command gives your systemd service units an automated security rating. This is a good starting point for security hardening.
Web Browsers
Firefox contained in Flatpak vs Snap comparison
A comparison of features, security, performance, and limitations of Firefox browser running in isolated sandboxes provided by Flatpak vs. Snap.
Linux
How to disable outgoing mDNS broadcasts on Linux
Tutorial for quieting Multicast DNS using various firewall front-ends for Linux’s iptables firewall such as FirewallD and Ubuntu’s UFW.
Linux
How I archived 26 500 old Ask Fedora community Q&As
Ask Fedora removed tens of thousands of questions-and-answers, but you can now access all of them through the Internet Archive.
Linux
Adjust or silence a systemd service’s logging levels
Here’s three ways to either change the logging level of a systemd service, or stop it from logging all together. Also useful for desktop apps flooding the log.
DNS
Embrace systemd-resolved
systemd-resolved improves DNS performance with query-caching. Learn how to configure it to increase system privacy and security with DNS over TLS and DNSSEC.
Gaming
Steam for Linux is more secure than on MacOS and Win32
Secure app-sandboxing makes Steam distributed via Flatpak for Linux a more secure gaming environment than MacOS and Windows 10.
Linux
Remote desktop capabilities still missing in Fedora Linux 29n
Fedora Linux removed VNC support when it moved to Wayland by default. A remote desktop replacement is still in the works; leaving Fedora Linux 29 users wanting.
Linux
Customize time and date formats in the GNOME top bar
How to use the Clock Override extension for GNOME to get full control over the time and date formats displayed in the GNOME top bar.
Linux
How to monitor system bandwidth usage statistics with Darkstat
Set up network monitoring and measure bandwidth consumption using Darkstat on Fedora Linux with systemd service management.
Privacy
I’d welcome usage reporting in Fedora Linux
Debian and Ubuntu have benefitted from good package reporting and analytics. It’s time Fedora Linux started collecting some more usage metrics.