Skip to main content

All Questions

Tagged with
0 votes
0 answers
553 views

High CPU load on SYN flood

When being under SYN flood attack, my CPU reach to 100% in no time by the kernel proccess named ksoftirqd, I tried so many mitigations but none solve the problem. This is my sysctl configurations ...
3 votes
1 answer
475 views

How to isolate a drive?

Question At Linux boot, is there an option I can add to the “vmlinuz…” line that will prevent the OS from ever (at least in that session) being able to see or access NVMe SSDs - while keeping all ...
2 votes
1 answer
10k views

How to Turn Off KPTI to Improve Performance in Fedora

Following the outbreak of KPTI news, I recently updated my kernel to 4.14.11-300. In addition to a quite sufficient RAM (8 GB) and fast IO (SSD disk), I have started to feel remarkable slowdown in my ...
1 vote
1 answer
680 views

How does encrypting /home partition with ecryptfs on linux stop malicious modification of /boot or /(root)?

This is a page where a developer of ecryptfs explains the difference between ecryptfs and dm-crypt: https://stackoverflow.com/questions/18230784/what-is-difference-between-linux-kernel-subsystem-dm-...
1 vote
1 answer
1k views

Linux - Whitelist hardware devices

For security purposes, is it possible to have the operating system enforce a whitelist of hardware devices? This means that plugged in devices that are not in the whitelist will be ignored at an as ...