Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Stay Ahead With Linux Security News

Filter%20icon Refine news
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security news

We found 2 articles for you...
79

Linux Kernel 6.0 EOL: Urgent Upgrade To 6.1 For Performance And Security

The time has come to say goodbye to the Linux 6.0 kernel series as it’s now marked as EOL (End of Life) on the kernel.org website, which means that it will no longer be updated. . Linux kernel 6.0 was released about three months ago on October 2nd, 2022, with new features like support for NVMe in-band authentication, async buffered writes when using both XFS and io_uring, io_uring zero-copy network transmission support, or support for PCI buses in the OpenRISC and LoongArch architectures. It also brought improvements to the RISC-V and AArch64 (ARM64) hardware architectures, new and improved features for the Btrfs and OverlayFS filesystems, as well as new and updated drivers for top-notch hardware support. Unfortunately, Linux kernel 6.0 is a short-lived branch, not an LTS (Long-Term Support) one, which means that it’s only supported with maintenance updates for a few months. Today, Linux kernel 6.0 reached end of life with the 6.0.19 update, which is the last stable release in the series. GNU/Linux distribution maintainers and users who use the Linux 6.0 kernel series are now urged by kernel maintainers to upgrade to a newer release, such as Linux kernel 6.1 , which was also updated today to version 6.1.5 for those interested in upgrading their kernels. The link for this article located at 9 to 5 Linux is no longer available. . Linux kernel 6.0 has now reached its end of life. Ensure you upgrade to 6.1 for access to the newest features and vital security updates.. Linux Kernel Upgrade, EOL Kernel, System Performance, Hardware Support, Linux Security. . LinuxSecurity.com Team

Calendar%202 Jan 13, 2023 User Avatar LinuxSecurity.com Team Security Projects
215

Linux Mint 21.1 Release Announcement With Hardware Enhancements

The new version will land around the 2022 holiday season with improved hardware support and USB stick creation. . Linux Mint users received a very early Christmas present in September 2022 when it was announced that Linux Mint 21.1, codenamed "Vera," would arrive around the 2022 holiday season. Linux Mint, a customized Ubuntu version will come with a raft of new features when it launches around Christmas 2022, according to a Linux Mint newsletter by team leader Clement Lefebvre. Lefebvre thanked the developers and donors to the project. It's not clear exactly which version 21.1 will be based on, but given that this is a point release, it will likely be based on Ubuntu 22.04 "Jammy Jellyfish" released earlier in 2022, since the existing Linux Mint 21 is based on that version. . Linux Mint 21.2 is set to deliver upgraded system compatibility and refined tools for creating bootable USB drives, as part of its holiday launch.. Linux Mint 21.1, Hardware Support Enhancements, USB Creation Improvements. . Brittany Day

Calendar%202 Oct 09, 2022 User Avatar Brittany Day Desktop Security
78

KaOS 2022.06 Security Fixes And Enhanced KDE Experience

KaOS, a modern open-source, well-designed KDE-focused Linux distro, has been updated to KaOS Linux 2022.06 and incorporates several bug fixes and security enhancements. . The newest version of KaOS is built on Glibc 2.35, GCC 11.3.0, and Binutils 2.38-based Toolchain. The update also brings theme improvements and includes DBus 1.14.0, Systemd 250.7, Nettle 3.8, and also the kernel moved to 5.17.15. One of the major highlights of this update is the addition of KDE Plasma 5.25.1 which significantly improves the user experience while switching between windows and workspaces. KaOS users can now see all of the open windows and virtual desktops while using gestures on the touchpad and touchscreens. The link for this article located at Cloud Host News is no longer available. . Explore the new capabilities of KaOS Linux 2022.06, highlighting improved security measures alongside an enhanced user interface powered by KDE Plasma.. KaOS Linux 2022.06, KDE Plasma 5.25, system enhancements. . LinuxSecurity.com Team

Calendar%202 Jun 24, 2022 User Avatar LinuxSecurity.com Team Vendors/Products
78

Deepin Linux 20.2.2: Enhanced App Store and Secure Boot Support

Deepin Linux 20.2.2 has been released featuring the eye-candy Deepin Desktop Environment (DDE), a brand-new app store and secure boot support, along with various bug fixes. . While many don’t trust it, Deepin Linux has its fans, and is well known for being one of the most modern and beautiful looking distros on the market. With this release, fans of Deepin Linux can enjoy a brand-new App Store that supports installation of Android apps, offers a better app management with support for batch installation of applications, and has a fresh new design with simplified interaction. Starting with this release, Deepin Linux is now more secure thanks to Secure Boot support, which makes the system only boot the signed kernel and OEM-trusted software. According to the developers, Deepin Linux is the first Chinese distribution to have obtained a Secure Boot certificate. The link for this article located at 9 to 5 Linux is no longer available. . The launch of Deepin Linux version 20.2.2 introduces a revamped software center, strengthened secure boot capabilities, and multiple enhancements.. Deepin Linux, Secure Boot, app management, Linux Distro. . LinuxSecurity.com Team

Calendar%202 Jul 01, 2021 User Avatar LinuxSecurity.com Team Vendors/Products
78

FreeBSD: Enhancing Security With SELinux And Event Auditing Features

I first touched a BSD box in around 1994, thanks to the donation of a BSD/OS system and SLIP connection from UUNet to my high school. It was love at first sight! Discovering FreeBSD not long after, I've been a regular FreeBSD user since around 1995, although I only became involved in FreeBSD development in 1999, gaining a "commit bit" to help maintain the FreeBSD portions of the Coda distributed file system, a project I had worked on while at Carnegie Mellon University. My undergraduate degree is in Logic and Computation, from CMU's philosophy department, along with a double major in Computer Science, but it became clear that my greatest interest lay in operating systems and security. After working on file system ACLs and mandatory access control for FreeBSD, I started the TrustedBSD Project in 2000, with the goal of bringing more advanced security features to the platform. In 2001, while working at Network Associates Laboratories (NAI Labs, and later McAfee Research), I proposed and became Principal Investigator on a research project as part of DARPA's CHATS research program, which was investigating security and open source. This project included sponsoring and developing UFS2, OpenPAM, the TrustedBSD MAC Framework, NSS support, PAE support, several network stack hardening projects (including syncache and syncookies for FreeBSD), GEOM, and GBDE. . Since that time, I've lead projects to port the SELinux FLASK/TE module to FreeBSD, implement Audit on Mac OS X and FreeBSD, and to port the TrustedBSD MAC Framework to Mac OS X. I've also become actively involved in the FreeBSD SMP network stack work, become a FreeBSD Core Team member, a member of the security officer and release engineering teams, and president of the FreeBSD Foundation. In the autumn of 2004, I left employment at SPARTA, Inc., as a Senior Principal Scientist to start work on a PhD at the Computer Laboratory at the University of Cambridge, working in the areas of operating systems, windowing systems, and application security. My work on FreeBSDcontinues as part of my research, intermittently under contract to various FreeBSD-consuming companies, and quite extensively in my spare time. The link for this article located at SecurityFocus.com is no longer available. . Since that time, I've lead projects to port the SELinux FLASK/TE module to FreeBSD, implement Audit . first, touched, around, thanks, donation, bsd/os, system, connect. . LinuxSecurity.com Team

Calendar%202 Nov 20, 2006 User Avatar LinuxSecurity.com Team Vendors/Products
79

LIDS 1.0.4 Release Boosts Kernel 2.4 Features and Security

LIDS is a kernel patch to enhance the linux kernel. LIDS 1.0.4 has been released for use with kernel version 2.4.0.. . .. LIDS is a kernel patch to enhance the linux kernel. LIDS 1.0.4 has been released for use with kernel version 2.4.0. New features include: Add inherit option when config file acls Add exec_domain from lids 0.9.11 Add configuration support to multi-platform Merge bugfixes from 0.9.11 I use LIDS on a daily basis and am very happy with it. I highly recommend it to anybody who wants to lock down a box pretty tight. Good luck to Xie and the rest of the LIDS team! The link for this article located at The LIDS Project is no longer available. . LIDS is a kernel patch to enhance the linux kernel. LIDS 1.0.4 has been released for use with kernel. kernel, patch, enhance, linux, released. . LinuxSecurity.com Team

Calendar%202 Jan 09, 2001 User Avatar LinuxSecurity.com Team Security Projects
78

Latest Security Tools And Access Control for Linux Systems

There have been a number of recent announcements regarding new security software and enhancements for Linux. SGI has started releasing their patches that will hopefully bring Linux "C2" and "B1" security ratings, as set out by the DoD Orange book . . .. There have been a number of recent announcements regarding new security software and enhancements for Linux. SGI has started releasing their patches that will hopefully bring Linux "C2" and "B1" security ratings, as set out by the DoD Orange book standard. These additions will not be ready for production use for quite some time. One of the perceived areas where Linux is behind other operating systems, such as NT, is in it's lack of access control lists (ACL's). Many would argue, myself included, that ACL's are a fine addition to system security if used properly, but because of their complexity this is often a problem. User's can end up with additional access rights to files/directories that they shouldn't have. Another problem is that file system controls, even fine grained ones such as ACL's, do not easily address what files a process can and cannot access. Getting a process to run as a distinct non-root user is sometimes not an easy task and has a tendency of breaking things like time synchronization software. The good news is this is exactly what SubDomain addresses. The link for this article located at   is no longer available. . There have been a number of recent announcements regarding new security software and enhancements fo. there, number, recent, announcements, regarding, security, software, enhancements. . LinuxSecurity.com Team

Calendar%202 Apr 26, 2000 User Avatar LinuxSecurity.com Team Vendors/Products
News Add Esm H340

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200