Tagged: hardening

9 May 2026 linux security spectre meltdown cpu vulnerabilities hardening kernel

spectre-meltdown-checker: Auditing CPU Vulnerability Mitigations on Linux

A deep dive into spectre-meltdown-checker — how it actually works under the hood, what it tells you that /sys/devices/system/cpu/vulnerabilities does not, the alternative tools (lscpu, vendor microcode checkers, in-tree kernel reporting), and when to reach for each one on a production Linux box.
26 April 2026 linux ssh security hardening bastion certificates auditing

SSH Hardening Beyond the Basics: Certificate Authorities, Bastion Patterns, and Session Auditing

A production-grade SSH setup that goes beyond disabling password auth — running your own SSH CA with short-lived user and host certificates, ProxyJump bastions, ForceCommand restrictions, and recording sessions with tlog and auditd.