Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

Stay Ahead With Linux Security News

Filter%20icon Refine news
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security news

We found 22 articles for you...
67

Fedora Workstation: Default Disk Encryption Plans For Enhanced Security

Fedora Workstation developers and those involved at Red Hat have been working to improve the state of disk encryption on Fedora with a end-goal of possibly making the installer encrypt systems by default. . While many Linux distributions allow for full-disk encryption these days, not many distributions enable it by default (Pop!_OS being among the rare that actively encourage it) while it looks like in the future Fedora Workstation could default to having its installer encrypt the disk. Owen Taylor of Red Hat laid out a mailing list post and Discourse thread today around the future of encryption with Fedora. With the encryption planning is also to have the encryption key stored in the system's Trusted Platform Module (TPM) and to also sign the bootloader/kernel/initrd with the TPM signatures. This work in turn is dependent upon the ongoing Unified Kernel Image support with Fedora and upstreams like systemd. The Fedora Workstation plan would be to use the upcoming Btrfs fscrypt support for encrypting both the system and home directories. The link for this article located at Phoronix is no longer available. . Ubuntu Desktop aims to bolster user privacy by implementing automatic disk encryption as a standard feature during setup for heightened security.. Fedora Workstation, Disk Encryption, Security Enhancement. . LinuxSecurity.com Team

Calendar%202 Apr 18, 2023 User Avatar LinuxSecurity.com Team Cryptography
79

OpenBSD 7.3 Release: Enhanced Security And Disk Encryption Capabilities

Theo de Raadt has released OpenBSD 7.3 as the 54th release for this BSD operating system project. . OpenBSD 7.3 has tons of improvements from new hardware support to new kernel innovations and security improvements to various other updates. OpenBSD 7.3 is also notable for finally adding guided disk encryption to its installer. Downloads and for a complete list of the hundreds of changes making up OpenBSD 7.3 can be found via the official release announcement on OpenBSD.org . The link for this article located at Phoronix is no longer available. . OpenBSD 7.3 brings enhanced hardware compatibility, upgrades to the kernel, and offers an interactive disk encryption option in its setup process.. OpenBSD 7.3, Disk Encryption, AMD RDNA3, Security Innovations. . LinuxSecurity.com Team

Calendar%202 Apr 12, 2023 User Avatar LinuxSecurity.com Team Security Projects
67

Systemd 252: Improved Boot Security And Disk Encryption Features

The fall version of systemd is here, with support for increased boot security, including tightened full-disk encryption. . The 113th version has the usual long feature list of very specific, targeted elements outlined in the release announcement. However, as one might expect following recent events, several of the headline features relate to the new UKI fully signed boot process . UKI is short for "Unified Kernel Image" and combines the Linux kernel and initrd into a single file, along with some other smaller components, allowing the whole thing to be cryptographically signed. The purpose is to tighten up security on the Linux boot process. . Explore the major improvements in Systemd 252, focusing on boot security and enhanced disk encryption features.. systemd Features, Linux Disk Encryption, Boot Security Improvements. . LinuxSecurity.com Team

Calendar%202 Nov 09, 2022 User Avatar LinuxSecurity.com Team Cryptography
209

Lennart Poettering Highlights Disk Encryption Issues in Linux

Most Linux distros are currently coming up short from offering adequate security around full disk encryption and authenticated boot. Prominent Linux developer Lennart Poettering even argues that your data is "probably more secure if stored on current ChromeOS, Android, Windows or macOS devices." . Lead systemd developer Lennart Poettering wrote a lengthy blog post today around the state of authenticated boot and disk encryption on Linux. While many Linux distributions offer full-disk encryption, offer UEFI SecureBoot, and begun embracing TPMs, many of the technologies aren't being used to their best potential yet especially now by default / out-of-the-box. Lennart's short summary of the situation is: Linux has been supporting Full Disk Encryption (FDE) and technologies such as UEFI SecureBoot and TPMs for a long time. However, the way they are set up by most distributions is not as secure as they should be, and in some ways quite frankly weird. In fact, right now, your data is probably more secure if stored on current ChromeOS, Android, Windows or MacOS devices, than it is on typical Linux distributions. The link for this article located at Phoronix is no longer available. . Lennart Poettering brings attention to vulnerabilities in Linux disk encryption and secure boot processes, urging for improvements.. Linux Disk Encryption, Authenticated Boot, Security Shortcomings, Data Protection, Lennart Poettering. . Brittany Day

Calendar%202 Sep 24, 2021 User Avatar Brittany Day Security Trends
67

In Depth Look at PGP Email File Disk Encryption Features

This ComputerCurrents article discusses the features in PGP (Pretty Good Privacy) encryption software, including email, file, and disk encryption. . . . . This ComputerCurrents article discusses the features in PGP (Pretty Good Privacy) encryption software, including email, file, and disk encryption. The link for this article located at ComputerCurrents is no longer available. . PGP (Pretty Good Privacy) encryption secures data with robust features for emails, files, and disks, ensuring confidentiality, integrity, and user-friendly management. PGP Encryption,Data Security,Privacy Software. . LinuxSecurity.com Team

Calendar%202 Jan 01, 2020 User Avatar LinuxSecurity.com Team Cryptography
67

Challenges in Device Encryption and Securing Data on Personal Devices

Full disk encryption provides incredible data protection for personal devices. If you haven’t enabled FileVault on your Mac, Windows Device Encryption on your PC, or Android Device Encryption on your phone, please go do it now (iOS encrypts storage by default). It’s easy, efficient, and secure. You will likely never notice the difference in usage or performance. Seriously. This is a no-brainer. . Once enabled, device encryption prevents just about anyone from accessing device data. Unless a malefactor possesses both device and authentication credentials, the data is secure. Mostly. The link for this article located at Just a Theory - David E. Wheeler is no longer available. . Once enabled, device encryption prevents just about anyone from accessing device data. Unless a male. encryption, provides, incredible, protection, personal, devices, haven’t. . LinuxSecurity.com Team

Calendar%202 Jun 27, 2019 User Avatar LinuxSecurity.com Team Cryptography
67

Comprehensive Guide for Encrypting Linux Partitions with Cryptoloop

This article will describe how to encrypt entire partition with a Cryptoloop. Cryptoloop is a disk encryption module for Linux. It was first introduced in the 2.5.x kernel series. . Cryptoloop has an ability to create an encrypted file system on a single partition or within a regular file, which can later simply be mounted by the mount command. Cryptoloop uses so called loopback device, which needs to be called with any file system request. Currently there are many alternatives for Cryptoloop usage and the most common is Loop-AES. This article will explain a simple usage of the cryptoloop module for partition encryption and mounting within a Linux Operating system. The link for this article located at Linuxcareer is no longer available. . Discover the process of safely encrypting a Linux partition with Cryptoloop to enhance your data security.. Disk Encryption,Cryptoloop,Filesystem Security,Encrypted Partition,Data Protection. . LinuxSecurity.com Team

Calendar%202 Feb 21, 2013 User Avatar LinuxSecurity.com Team Cryptography
67

TrueCrypt Disk Encryption: Analyzing Security Flaws and Risks

The open source TrueCrypt disk encryption tool is considered the to be the software of choice for systematically encrypting data. It is able to encrypt individual drives, such as USB Flash drives, and even entire hard drives. A small utility called TCHead is, however, able to tackle data encrypted using TrueCrypt.. The link for this article located at H Security is no longer available. . The link for this article located at H Security is no longer available.. source, truecrypt, encryption, considered, software, choice. . LinuxSecurity.com Team

Calendar%202 Oct 24, 2012 User Avatar LinuxSecurity.com Team Cryptography
News Add Esm H340

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200