Defense

References

• PAM vs NSS: https://serverfault.com/questions/538383/understand-pam-and-nss/
• Support to authenticate against PostgreSQL for PAM-enabled appliations: https://github.com/pam-pgsql/pam-pgsql

Tools

• Locally checks for signs of a rootkit: http://www.chkrootkit.org/

Checklists

• Linux hardening checklist: https://github.com/trimstray/linux-hardening-checklist
• Kernel hardning checklist: https://github.com/a13xp0p0v/kconfig-hardened-check