kernel-hardening

Audit kernel security configurations for memory protection and syscall surface reduction.

1|1|Updated Feb 21, 2026

Search Tags:#security #audit #kernel #mitigation #hardening #syscall

Ready to run

npx skills add https://github.com/dtsong/claude-code-windows-setup --skill kernel-hardening

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: kernel-hardening
Source: https://github.com/dtsong/claude-code-windows-setup/tree/main/skills/council/warden/kernel-hardening
Command: npx skills add https://github.com/dtsong/claude-code-windows-setup --skill kernel-hardening

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill audits your kernel's security configuration to protect against sophisticated local and remote attacks, ensuring robust memory protection, reduced attack surfaces, and integrity mechanisms.

Core Features & Use Cases

Kernel Configuration Audit: Reviews settings for memory protection (KASLR, SMAP/SMEP), control flow integrity (CFI), and exploit mitigations.
Syscall Surface Analysis: Assesses and recommends restrictions for system call exposure, including seccomp-bpf integration.
Integrity Verification: Checks secure boot chains, module signing, and runtime file integrity monitoring.
Use Case: A security engineer needs to harden a Linux server's kernel to meet CIS benchmarks. This Skill will analyze the current configuration, identify vulnerabilities, and provide a prioritized remediation plan.

Quick Start

Audit the kernel configuration for memory protection and syscall surface reduction.

Frequently Asked Questions about kernel-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit my Linux kernel configuration for memory protection and exploit mitigations?▼

To audit kernel security configurations, provide your current settings for review against memory protection mechanisms like KASLR and SMAP/SMEP, along with control flow integrity checks. This generates a vulnerability assessment without modifying your system.

What is the best way to reduce the syscall surface on my server?▼

The best way to reduce the syscall surface is by analyzing system call exposure and integrating seccomp-bpf restrictions. This audit evaluates current syscall availability and provides a prioritized remediation plan to minimize local and remote attack vectors.

How does seccomp-bpf integrate with kernel hardening workflows?▼

Seccomp-bpf integrates with kernel hardening by filtering system calls at the kernel level to reduce attack surfaces. This Skill assesses your current seccomp configurations and recommends specific restrictions to enhance syscall surface reduction.

Can I use this to check my kernel against CIS and KSPP benchmarks?▼

Yes, you can use this to check your kernel against CIS and KSPP benchmarks. The audit evaluates your kernel security configurations for memory protection and integrity mechanisms, identifying gaps and providing a prioritized remediation plan to meet these standards.

Does the kernel hardening audit verify secure boot chains and module signing?▼

Yes, the kernel hardening audit verifies secure boot chains and module signing. It checks your runtime file integrity monitoring and boot chain configurations to ensure robust integrity mechanisms against advanced threats.

Will this Skill modify my kernel configurations or execute system commands?▼

No, this Skill will not modify your kernel configurations or execute system commands. It is strictly an audit tool that analyzes settings for memory protection, syscall surface reduction, and integrity mechanisms, outputting only remediation recommendations.