↓ Skip to main content

Linux

initramfs (initial RAM filesystem)

Linux Boot Security Systemd Luks Dracut

IMA (Integrity Measurement Architecture)

Security Linux Kernel Attestation Tpm Integrity

GRUB (GNU GRand Unified Bootloader)

Boot Linux Bootloader Uefi Bios

fs-verity

Linux Kernel Integrity Filesystem Composefs Ima Android

firewalld

Networking Security Linux Firewall Rhel Systemd

fapolicyd (File Access Policy Daemon)

Security Linux Rhel Allowlisting Integrity Policy

eBPF (Extended Berkeley Packet Filter)

Linux Kernel Networking Observability Security Ebpf

dm-verity

Linux Kernel Integrity Storage Boot Android Device-Mapper

composefs

Filesystem Containers Security Linux Integrity Ostree

cgroups (Control Groups) v2

Linux Kernel Containers Resources Kubernetes Systemd

bootc (Bootable Containers)

Containers Linux Ostree Oci Immutable Boot Cncf

AppArmor (Application Armor)

Linux Kernel Security Mac Lsm Ubuntu Containers

AIDE (Advanced Intrusion Detection Environment)

Security Linux Integrity Monitoring Rhel Compliance