security 归档 - 第4页 共9页 - 夜莺博客

标签:security

SELinux Denials: Troubleshooting with ausearch

SELinux Denials: Troubleshooting with ausearch

Fix SELinux denials the right way: ausearch for AVC messages, restorecon and semanage fcontext for labels, setsebool for booleans, audit2allow as a la

admin admin 2026-09-23
0 0 0
BIND9 DNSSEC Signing and Validation Setup

BIND9 DNSSEC Signing and Validation Setup

Sign a BIND9 zone with DNSSEC and configure validating resolvers: generate KSK and ZSK keys, enable dnssec-policy, and verify with dig +dnssec.

admin admin 2026-09-20
0 0 0
WireGuard Site-to-Site VPN Configuration Guide

WireGuard Site-to-Site VPN Configuration Guide

Build a WireGuard site-to-site tunnel: generate keys, write wg0 configs with AllowedIPs routing, enable forwarding, and verify with wg show.

admin admin 2026-09-20
0 0 0
Check Point fw monitor Packet Capture Guide

Check Point fw monitor Packet Capture Guide

Capture traffic on a Check Point gateway with fw monitor: use the -m inspection points, filter expressions, and flags to see where packets are dropped

admin admin 2026-09-20
0 0 0
Windows Server DFSR Replication Troubleshooting Guide

Windows Server DFSR Replication Troubleshooting Guide

Diagnose DFSR replication failures on Windows Server: check backlog, state, membership and propagation tests, and recover a member safely.

admin admin 2026-09-20
0 0 0
NetApp ONTAP FPolicy Configuration for File Auditing

NetApp ONTAP FPolicy Configuration for File Auditing

Set up NetApp ONTAP FPolicy external file access notification: create the policy, event filter, external engine, and verify file activity auditing.

admin admin 2026-09-20
0 0 0
ArubaOS-CX Port Security: MAC Lockout and Client Limits

ArubaOS-CX Port Security: MAC Lockout and Client Limits

Secure ArubaOS-CX access ports with MAC lockout, port-access client limits, and sticky learning, plus verification commands to confirm enforcement.

admin admin 2026-09-20
0 0 0
tshark Command-Line Packet Analysis Guide

tshark Command-Line Packet Analysis Guide

Analyse pcaps with tshark instead of the GUI: capture and display filter syntax, field extraction, conversation statistics, exporting objects and rota

admin admin 2026-09-19
0 0 0
Kubernetes Ingress TLS with cert-manager and Let's Encrypt

Kubernetes Ingress TLS with cert-manager and Let's Encrypt

Automate Kubernetes TLS with cert-manager: install via Helm, create staging and production ClusterIssuers, HTTP-01 vs DNS-01 challenges and expiry mon

admin admin 2026-09-19
0 0 0
Linux auditd: Rules, auditctl and ausearch Investigations

Linux auditd: Rules, auditctl and ausearch Investigations

Build auditd rules that survive production: rule ordering, keys, auditctl verification, ausearch investigation and auditd performance tuning.

admin admin 2026-09-19
0 0 0
1 2 3 4 5 6 … 9