AppArmor (Application Armor) is a Linux kernel security module that restricts program capabilities using per-program profiles. It is enabled by default on Ubuntu and provides Mandatory Access Control (MAC) to contain the blast radius of exploited applications. This guide manages AppArmor profiles on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu […]
Login banners and MOTD (Message of the Day) serve both legal and operational purposes: they warn unauthorised users, satisfy compliance requirements (PCI-DSS, HIPAA, SOC 2), and display important system information to admins. This guide configures SSH banners and MOTD on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu 26.04 LTS A […]
A default MySQL installation exposes several security risks — anonymous users, a test database, and root remote login. Beyond the initial security script, additional hardening significantly reduces your attack surface. This guide walks through a thorough MySQL 9 security hardening process on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu 26.04 […]
SSH key authentication is far more secure than password-based login. A cryptographic key pair — private key on your machine, public key on the server — lets you connect without a password and protects against brute-force attacks. This guide covers generating a key pair and deploying it on Ubuntu 26.04 LTS. Tested and valid on: […]
Secure your Ubuntu server with SSH keys. Learn how to generate, configure, and use SSH keys for passwordless authentication in this tutorial.
Two-factor authentication (2FA) for SSH adds an extra layer of security by requiring both your SSH key and a time-based one-time password (TOTP) from an authenticator app. This guide configures 2FA for SSH using Google Authenticator PAM on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu 26.04 LTS SSH access with […]
SSH, or secure shell, is an encrypted protocol used to administer and communicate with servers. When working with a Rocky Linux server, chances are you will spend most of your time in a terminal session connected to your server through SSH. In this guide, we’ll focus on getting a reliable SSH configuration set up.
Default PHP settings expose version information, allow dangerous functions, and leave logging disabled. This guide hardens PHP 8.3 on Ubuntu 24.04 LTS to protect production web applications. Tested and valid on: Ubuntu 24.04 LTS Prerequisites Ubuntu 24.04 LTS server with PHP 8.3 installed A user with sudo privileges Step 1 – Disable Version Exposure Open […]
Une version précédente de ce tutoriel a été rédigée par Justin Ellingwood Vous voulez accéder à Internet en toute sécurité depuis votre smartphone ou votre ordinateur portable connecté à un réseau non sécurisé…
Fail2ban is a service that can be run on your server to dynamically block clients that repeatedly fail to authenticate correctly with your services . This can help mitigate the affect of brute force attacks and illegitimate users of your services. In this guide, we’ll demonstrate how to install and configure fail2ban to protect SSH on a Rocky Linux 9 server.
Progressive Robot: Your Gateway to Comprehensive IT Solutions — Specializing in Web Development, Mobile App Development, and Expert IT Services.
© All Copyright by Progressiverobot.com
VAT Number ( 506152326 )
