DEV Community

#defensivesecurity

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
ReadWritePaths is an exception list, not a replacement for ProtectSystem

ReadWritePaths is an exception list, not a replacement for ProtectSystem

Comments
3 min read
ProtectClock closes more than the RTC device

ProtectClock closes more than the RTC device

Comments
3 min read
TemporaryFileSystem and BindPaths create two different views of the same host

TemporaryFileSystem and BindPaths create two different views of the same host

Comments
3 min read
PrivatePIDs and ProcSubset hide process state that incident response still needs

PrivatePIDs and ProcSubset hide process state that incident response still needs

Comments
3 min read
A reachable blackbox_exporter accepts a target and a request path

A reachable blackbox_exporter accepts a target and a request path

Comments
3 min read
RestrictFileSystems controls filesystem types, not application paths

RestrictFileSystems controls filesystem types, not application paths

Comments
3 min read
AmbientCapabilities and NoNewPrivileges need a capability review, not just two switches

AmbientCapabilities and NoNewPrivileges need a capability review, not just two switches

Comments
3 min read
PolicyKit allow_active answers a session question, not an identity question

PolicyKit allow_active answers a session question, not an identity question

Comments
3 min read
An nginx alias is only as safe as the location that reaches it

An nginx alias is only as safe as the location that reaches it

Comments
3 min read
SQL SECURITY DEFINER turns a stored routine into an authorization boundary

SQL SECURITY DEFINER turns a stored routine into an authorization boundary

Comments
3 min read
What 9100 exposes when node_exporter is reachable

What 9100 exposes when node_exporter is reachable

Comments
3 min read
core.hooksPath moves executable policy outside the repository

core.hooksPath moves executable policy outside the repository

Comments
3 min read
postgres_exporter counts are a database-monitoring inventory

postgres_exporter counts are a database-monitoring inventory

Comments
3 min read
mysqld_exporter exposes a credential path as well as metrics

mysqld_exporter exposes a credential path as well as metrics

Comments
3 min read
HAProxy metrics are useful only when the stats path is understood

HAProxy metrics are useful only when the stats path is understood

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.