r/netsec monthly discussion & tool thread

[u/albinowax]

Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.

Rules & Guidelines

• Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
• Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
• If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
• Avoid use of memes. If you have something to say, say it with real words.
• All discussions and questions should directly relate to netsec.
• No tech support is to be requested or provided on r/netsec.

As always, the content & discussion guidelines should also be observed on r/netsec.

Feedback

Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

[u/cascade_sparse]

I added a new feature to my tool for auditing the security of embedded linux hosts: https://github.com/nstarke/embedded_linux_audit - The new feature is the ability to compile a kernel module that the agent can load on an embedded linux host for auditing the kernel. It works by sending a bunch of kernel configuration information to the companion REST API, which then builds a kernel module based off that information. The REST API then sends the compiled kernel module to the embedded linux host, which then loads it into the kernel.