[MCAFEE]On Drovorub: Linux Kernel Security Best Practices

[igor51]

On Drovorub: Linux Kernel Security Best Practices

Intro In a U.S. government cyber security advisory released today, the National Security Agency and Federal Bureau of Investigation warn of a previously undisclosed piece of Linux rootkit malware called Drovorub and attribute the threat to malicious actor APT28. The report is incredibly detailed and proposes several complementary detection techniques to effectively identify Drovorub malware […]

The post On Drovorub: Linux Kernel Security Best Practices appeared first on McAfee Blogs.

Source: On Drovorub: Linux Kernel Security Best Practices

[Tawal]

Hello,

Keeping a system updated and fully protected isn’t specific to Windows-based environments. Linux based systems are widespread within many enterprise organizations, requiring the same maintenance as any modern operating system. Linux offers a robust, secure computing platform which can meet many needs. As in most cases, proper configuration is key to the security of the platform.

On en avait déjà parlé avec igor51 (il y a un moment de ça) quand je m'intéressais à Apparmor.
Évidemment, SelLinux est bien meilleur car plus en amont (et ce n'est pas le même fonctionnement/implémentation).