SystemD Service Hardening
roguesecurity.dev
Discover additional security options for systemd units, to include quadlets. These options are everything from system permissions, time manage, BPF, syscall & seccomp filters, etc., all to make your system more secure.

cross-posted from: https://infosec.pub/post/32937284

This one is a little self-hosting specific, and more casual Linux best practices, but I’ve got a new blog post down for general security! Harden your systemd units (especially custom ones) for better peace of mind on the internet!