2 articles in this category
Reduce attack surfaces by replacing broad root privileges with granular Linux capabilities like CAP_NET_BIND_SERVICE for specific service needs.
Secure Linux hosts with firewalld and OpenVPN