Scanning a server from an outside machine, the ss -tlnp inventory, PostgreSQL listen_addresses, an nftables ruleset with policy drop and keeping it, processes with deleted files after an upgrade, needrestart and the kernel. The questions follow the lessons “Auditing listening services” and “The update is in, the vulnerability is still alive”.
10 questions · threshold 70%