skills.rest
linfordWu
linfordWuCOMMUNITY
Explore all skills by this author →
GitHub

linux-security-diagnosis

Collect Linux security evidence across authentication, permissions, auditing, and kernel layers.

1|1|Updated Apr 25, 2026
Search Tags:#security#troubleshooting#logs#auditing#diagnosis#linux#selinux
One-click install
npx skills add https://github.com/linfordWu/owls --skill linux-security-diagnosis
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: linux-security-diagnosis
Source: https://github.com/linfordWu/owls/tree/main/skills/linux-security-diagnosis
Command: npx skills add https://github.com/linfordWu/owls --skill linux-security-diagnosis

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python3, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Linux-security-diagnosis helps operators quickly identify and diagnose security-related failures on Linux systems by collecting evidence across authentication, access control, auditing, and kernel security components.

Core Features & Use Cases

  • Evidence-driven collection of authentication, permission, auditing, and kernel data to reproduce security incidents.
  • Structured, script-driven diagnostics that produce a clear root-cause narrative and remediation guidance.
  • Use cases include handling login failures, PAM/SSSD/LDAP issues, SELinux/AppArmor denials, firewall and network anomalies, and audit/log integrity gaps.

Quick Start

Run the linux-security-diagnosis skill on a Linux host to start an automated security diagnostic data collection and analysis session.

Frequently Asked Questions about linux-security-diagnosis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I diagnose SELinux denials and authentication failures on CentOS or EulerOS?▼

Diagnose SELinux denials and authentication failures by collecting evidence across PAM, SSSD, LDAP, and kernel auditing layers using scripts, correlating root causes, and generating structured remediation guidance for CentOS and EulerOS.

What is the best way to troubleshoot PAM, SSSD, and LDAP login problems on Linux?▼

Troubleshoot PAM, SSSD, and LDAP login problems by executing automated data collection scripts that gather authentication logs and access control evidence, correlating events to identify root causes and providing standardized remediation steps.

Can I use this approach to investigate firewall anomalies and network security issues?▼

Investigate firewall anomalies and network security issues using dedicated collection scripts that gather network layer evidence, correlate it with auditing data, and output a diagnostic report with root-cause analysis and remediation guidance.

Do I need Python3 to run evidence-driven Linux security diagnostics?▼

Python3 is required on the Linux host to run evidence-driven security diagnostics, which utilize shell scripts like collect_auth.sh and collect_audit.sh to gather data and generate a standardized diagnostic report.

How do I identify auditing gaps and kernel module security events on Linux?▼

Identify auditing gaps and kernel module security events by running collect_kernel.sh and collect_audit.sh scripts to collect kernel logs and audit subsystem data, correlating evidence to pinpoint integrity issues and kernel-level anomalies.

Related Skills

Explore More Software Engineering Skills→
openeuler-mirroropeneuler-mirror
3

docker-fault-analysis

Correlate kernel events, cgroup metrics, and runtime logs to diagnose Docker container failures.

Official
Advanced
Q16GQ16G
83

emergency-response

Orchestrate incident response workflows across detection, containment, eradication, and recovery.

Community
Advanced
zenobi-uszenobi-us
68

incident-responder

Coordinate incident response for security breaches and operational incidents.

Official
Advanced
brenordvbrenordv

linux-troubleshooting

Diagnose Linux system performance, service failures, and network issues.

Community
Intermediate