kernel-hardening

To audit kernel security configurations, provide your current settings for review against memory protection mechanisms like KASLR and SMAP/SMEP, along with control flow integrity checks. This generates a vulnerability assessment without modifying your system.

The best way to reduce the syscall surface is by analyzing system call exposure and integrating seccomp-bpf restrictions. This audit evaluates current syscall availability and provides a prioritized remediation plan to minimize local and remote attack vectors.

Seccomp-bpf integrates with kernel hardening by filtering system calls at the kernel level to reduce attack surfaces. This Skill assesses your current seccomp configurations and recommends specific restrictions to enhance syscall surface reduction.

Yes, you can use this to check your kernel against CIS and KSPP benchmarks. The audit evaluates your kernel security configurations for memory protection and integrity mechanisms, identifying gaps and providing a prioritized remediation plan to meet these standards.

Yes, the kernel hardening audit verifies secure boot chains and module signing. It checks your runtime file integrity monitoring and boot chain configurations to ensure robust integrity mechanisms against advanced threats.

No, this Skill will not modify your kernel configurations or execute system commands. It is strictly an audit tool that analyzes settings for memory protection, syscall surface reduction, and integrity mechanisms, outputting only remediation recommendations.