Linux Hardening Guide

A practical approach to Privacy and Security. Contribute to PrivSec-dev/privsec.dev development by creating an account on GitHub.

I had to reinstall Fedora, so I documented the thing. This is the setup, the hardening, and everything I do to get it to a state I'm comfortable with.

Versatile, low-power backups with Time Machine & a Raspberry Pi

Do not spread paranoia

Linux is not a secure desktop operating system. However, there are steps you can take to harden it, reduce its attack surface, and improve its privacy. Before we start… Some of the sections will include mentions of unofficial builds of packages like linux‑hardened, akmod, hardened_malloc, and so on. These are not endorsements — they are merely to show that you have options to easily obtain and update these packages. Using unofficial builds of packages means adding more parties to trust, and you have to evaluate whether it is worth doing so for the potential privacy/security benefits or not.