Seccomp is a Linux kernel feature that restricts which system calls a process may make, shrinking the kernel attack surface of sandboxes…
SELinux is a Linux security module that enforces mandatory access control, confining processes by labels and policy even when they run as…
A shell script is a text file of commands that a Linux shell such as Bash executes in sequence to automate administration…
A Snap is a self-contained Linux software package that bundles an application with its dependencies and installs, updates and confines it through…
strace is a Linux diagnostic tool that traces the system calls and signals of a process, showing how a program interacts with…
sudo is the Linux command that lets an authorized user run a single command as root or another user, governed by the…
A symbolic link is a Linux filesystem entry that stores a path to another file or directory, which the kernel follows transparently…
systemctl is the command-line tool for controlling systemd on Linux, used to start, stop, enable and inspect services, targets and other units.
systemd is the Linux init system and service manager that runs as PID 1, starts the system in parallel and supervises services…
A systemd timer is a Linux unit file that activates another unit on a calendar schedule or after a delay, a modern…
A systemd unit is a declarative configuration object that tells systemd how to start, stop, order and supervise one resource during Linux…