A complete yet beginner friendly guide on how to secure Linux

• goprotobuf

  13 9,534 2.8 Go

  Go support for Google's protocol buffers (by golang)

  

go get github.com/golang/protobuf/protoc-gen-go

• dep

  5 13,228 1.6 Go

go get -u github.com/golang/dep/cmd/dep

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• vaultwarden

  489 32,770 8.9 Rust

  Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

Use bitwarden for a free hosted option, keepassxc for an offline/local option, or vaultwarden for a seldhosted option.

• lynis

  72 12,493 8.1 Shell

  Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

  

• keepassxc

  512 19,176 8.7 C++

  KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.

  

Use bitwarden for a free hosted option, keepassxc for an offline/local option, or vaultwarden for a seldhosted option.

• Cryptomator

  491 10,619 9.7 Java

  Multi-platform transparent client-side encryption of your files in the cloud

  

Use cryptomator to auto encrypt files when uploading files to cloud. Use veracrypt for a more secure, but manual option, or just GnuPg which is included by default in most distros, however gnupg doesn’t support folder encryption.

• pass-import

  403 767 8.4 Python

  A pass extension for importing data from most existing password managers

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• Pi-hole

  2,357 46,711 8.0 Shell

  A black hole for Internet advertisements

  

I personally use a PiHole for a DNS server, which is configured to use Cloudflare using DoH (DNS over HTTPS). I also block all DNS outbound on my network firewall. The PiHole DNS server is configured for my network devices over DHCP, which is also the PiHole server. This allows me to connect to other devices on my network by name, track IP assignments, track DNS queries, and block data collection and unauthorized DNS queries by various devices like my Amazon Echo or PlayStation.

• linux-hardened

  16 538 0.0 C

  Minimal supplement to upstream Kernel Self Protection Project changes. Features already provided by SELinux + Yama and archs other than multiarch arm64 / x86_64 aren't in scope. Only tags have stable history. Shared IRC channel with KSPP: irc.libera.chat #linux-hardening

linux-hardened is maintained by the Arch Linux project lead, the latest commit is from 9 days ago (you have to switch to the 5.4 branch) https://github.com/anthraxx/linux-hardened

• opensnitch

  213 9,652 9.2 Python

  OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

• focus-android

  17 2,128 9.7 Kotlin

  Discontinued ⚠️ Firefox Focus (Android) moved to a new repository. It is now developed and maintained as part of: https://github.com/mozilla-mobile/firefox-android

  

He ignores the majority’s opinion for his own, again contradicting the “options” and “anti-censorship” the browser offered amongst Firefox users.

• openbsd-wip

  27 262 9.6 C++

  OpenBSD work in progress ports

Some other points to bare in mind: .this, this (bloat), and this

• steam-for-linux

  463 4,108 2.0

  Issue tracking for the Steam for Linux beta client

  

Look, there was an issue with Steam, where one could lose all their data, because some Steam developer wasn't experienced enough with shell scripting. So, people happily installed the native Steam package from their distribution's repository, and run it without any means of sandboxing, and ultimately, some of them lost their data, as you can read.

Suggest a related project