Skip to main content

All Questions

Tagged with
0 votes
0 answers
547 views

High CPU load on SYN flood

When being under SYN flood attack, my CPU reach to 100% in no time by the kernel proccess named ksoftirqd, I tried so many mitigations but none solve the problem. This is my sysctl configurations ...
iTaMaR's user avatar
  • 103
3 votes
1 answer
473 views

How to isolate a drive?

Question At Linux boot, is there an option I can add to the “vmlinuz…” line that will prevent the OS from ever (at least in that session) being able to see or access NVMe SSDs - while keeping all ...
user969571's user avatar
2 votes
1 answer
10k views

How to Turn Off KPTI to Improve Performance in Fedora

Following the outbreak of KPTI news, I recently updated my kernel to 4.14.11-300. In addition to a quite sufficient RAM (8 GB) and fast IO (SSD disk), I have started to feel remarkable slowdown in my ...
Mehdi Haghgoo's user avatar
1 vote
1 answer
679 views

How does encrypting /home partition with ecryptfs on linux stop malicious modification of /boot or /(root)?

This is a page where a developer of ecryptfs explains the difference between ecryptfs and dm-crypt: https://stackoverflow.com/questions/18230784/what-is-difference-between-linux-kernel-subsystem-dm-...
pangolin's user avatar
1 vote
1 answer
1k views

Linux - Whitelist hardware devices

For security purposes, is it possible to have the operating system enforce a whitelist of hardware devices? This means that plugged in devices that are not in the whitelist will be ignored at an as ...
user avatar