DrupalCon Portland 2013: LINUX SYSTEM SECURITY TUNABLES

This talk focuses on enhancing web hosting security, particularly in a post-intrusion scenario. The speaker discusses the importance of privilege separation, emphasizing the need for strict control over SSH keys and the implementation of two-factor authentication. They highlight various system tunables that can be activated to impede an attacker's information-gathering efforts and to protect the kernel from userspace vulnerabilities. The session also addresses the significance of maintaining separation between root user access and kernel-level access, especially for systems using external kernels, to effectively strengthen defenses against potential attacks.