Everyone thinks that Linux is secure by default, and I generally agree (this is a controversial topic). Linux does indeed have a built-in security model. You need to enable it and customize it to achieve a more secure system. Linux is harder to manage, but correspondingly more flexible, with more configuration options. For system administrators, … Read more
This article will take you from zero to mastering the core knowledge of Magisk module development, and through practical case studies, you will learn how to write your own modules. Table of Contents 1. What is a Magisk Module 2. How Magisk Modules Work 3. Basic Structure of a Module 4. Detailed Explanation of Core … Read more
Linux Identity and Access Control In Linux systems, Identity and Access Control (IAC) is at the core of security management. It ensures secure access to resources through users, groups, permissions, and advanced mechanisms such as SELinux, preventing unauthorized operations and data breaches. According to an OWASP report, access control vulnerabilities are the primary risk in … Read more
Security Hardening of Linux Systems Linux is a free and open-source Unix-like operating system. As an open-source operating system, Linux servers are widely used due to their significant advantages in security, efficiency, and stability. However, if permissions are not properly allocated, the security of the Linux system cannot be adequately guaranteed. Below, we will primarily … Read more
System Version Introduction The openGauss installation in this case is based on the openEuler-20.03-LTS version. The current best compatible Python versions for openGauss are Python 3.6 and Python 3.7. The openEuler version used in this experiment comes with Python 3.7.4 pre-installed, so no additional installation is required. Modify System Configuration (Both primary and standby need … Read more
Node Environment Management Node • System Version: Rocky Linux release 8.10 (Green Obsidian), minimal installation • Python Environment: python3.12 • Ansible-core Version: 2.15.13 For demonstration purposes, we are installing <span>ansible-core</span> (which includes only the basic modules). For normal use, you can install <span>ansible</span> (which includes some extended modules) for easier usage. This installation is done … Read more
链接：https://blog.csdn.net/2401_84578953/article/details/144244011? ☞The course by Liang Xu has completely exploded!☜ Everyone thinks that Linux is secure by default, and I generally agree (this is a controversial topic). Linux does indeed have a built-in security model. You need to enable it and customize it to achieve a more secure system. Linux is harder to manage, but correspondingly … Read more
1. SELinux and Firewall Optimization 1. SELinux SELinux, or Security-Enhanced Linux, is a Linux kernel module and a security subsystem for Linux, primarily developed by the National Security Agency (NSA). Its main purpose is to minimize the resources accessible to service processes in the system (principle of least privilege). Due to this principle, many operations … Read more
In the world of Linux, the root password is like a master key to unlock the system’s treasures, holding supreme privileges. However, if this “key” is lost, it can lead to significant trouble. Imagine being excited to log into the server and showcase your skills, only to be met with the unyielding “Password incorrect” message, … Read more
This article introduces how to enable/disable SELinux permissions in the open-source OpenHarmony system,demonstrated on the Tactile Intelligence Purple Pi OH development board, which is equipped with the Rockchip RK3566 chip, designed like a Raspberry Pi, recommended by the Laval official community, and has adapted to the new OpenHarmony 5.0 Release system! SELinux Permission Status SELinux … Read more