Skip to content
Linux Hardening

Hardening domain

Kernel Hardening

The kernel is the most valuable target on the box. This domain applies hardening sysctls (ASLR, ptrace scope, kptr restrictions), blacklists risky modules, and uses kernel lockdown to shrink what an attacker can reach.

  1. Kernel Hardening with sysctl, Modules & Lockdown

    Harden the Linux kernel with sysctl tunables, module blacklisting, and lockdown mode. Practical /etc/sysctl.d and modprobe.d examples with verification.

All posts in this series

Kernel Hardening with sysctl, Modules & Lockdown
Harden the Linux kernel with sysctl tunables, module blacklisting, and lockdown mode. Practical /etc/sysctl.d and modprobe.d examples with verification.
kernelsysctlmoduleslockdown