Endpoints · Operating Systems
Linux
The dominant server operating system family, managed by configuration management and increasingly present as a managed endpoint.
IntermediateUpdated 2026-09-01
Overview
Enterprise Linux estates are managed with configuration management tooling (Ansible, Puppet, Salt) or immutable image pipelines, with package repositories controlling software and patching. Access is typically via SSH keys or certificates, integrated with central identity through SSSD or a cloud identity provider.
Security controls include SELinux or AppArmor for mandatory access control, auditd for event logging, host firewalls, and disk encryption with LUKS.
Security considerations
- Centralise authentication and remove local accounts; use sudo policy rather than shared root access.
- Ship auditd and journal logs off host and keep SELinux or AppArmor enforcing.