#tag

Linux Security

2 matching posts.

PentestAug 25, 202621 min read

The Container Was Non-Root. The Node Was Still One Mount Away.

A container security methodology that measures mounts, runtime authority, kernel controls, and workload identity instead of treating a non-root UID or a passing policy check as proof of isolation.

#container-security#linux-security#privilege-escalation#access-control#methodology

PentestAug 22, 202618 min read

The Hardening Score Went Up. The Attack Path Stayed Open.

A practical Linux hardening methodology that uses Lynis as a sensor, established baselines as context, and controlled retesting to prove which changes reduce attack paths without breaking the service.

#linux-security#methodology#privilege-escalation#access-control