Hardening domain
Updates & Packages
Unpatched software is the most common way in. This domain sets up automatic security updates, verifies repository signatures, removes unneeded packages, and tracks vulnerabilities in what remains.
- Automatic Security Updates on Linux
Keep Linux patched automatically with unattended-upgrades and dnf-automatic, trusted repositories, and a reduced package surface.