Linux Audit Framework: Minimal auditd Design, Trust Boundaries, and Failure Modes
Run auditd with a minimal rule set, forward logs to a protected collector, and monitor backlog and disk space to avoid dropped events or silent gaps.
Loading…
ReadMeFeed / Community knowledge
#linux-kernel
Real questions. Useful conversations. Find the people who know your stack.
High-Performance Packet Filtering with Linux XDP
Learn how Linux XDP (eXpress Data Path) allows high-performance packet filtering by executing eBPF programs at the NIC driver level, bypassing the expensive kernel network stack.
Enabling and Verifying ARM64 SVE Support in Linux
A practical guide to enabling ARM64 Scalable Vector Extension (SVE) in Linux: verify CPU support, configure the kernel, compile with -march=armv8.1-a+sve, and check binaries at runtime.
Capturing Kernel Panics with kdump: Setup and Validation Guide
Learn how to configure kdump to capture vmcore files during Linux kernel panics. This guide covers GRUB memory reservation, kexec validation, and triggering test panics.
Enabling ARM Memory Tagging Extension (MTE) on AArch64 Linux to Catch Heap Buffer Overflows
Learn how to enable ARM MTE on AArch64 Linux to detect heap buffer overflows, including hardware checks, kernel config, userspace opt‑in, and validation steps.
Diagnosing and Resolving Zombie (Defunct) Processes in Linux
Zombie processes occupy the system process table without using CPU or RAM, risking PID exhaustion. This guide explains how to trace defunct processes to their parents and clear them.
Designing Process Isolation with Linux Network and PID Namespaces
Learn how to implement process isolation using Linux Network and PID namespaces. This architecture note covers the smallest suitable design for isolating workloads without the overhead of VMs.
Optimizing WSL 2 Performance: Solving the Cross-File System Bottleneck
Stop struggling with slow I/O in WSL 2. Learn why the /mnt/c/ boundary kills performance and how to properly structure your project files for native Linux speeds on Windows 11.
Debian Backports: Getting a Newer Kernel Without Leaving Stable
Debian stable freezes package versions, which is great until you need a newer kernel or tool. Backports lets you opt in to newer software per package without destabilizing the base system — here's how to do it safely, and the security trade-off to weigh.
debian