Security on Eric The IT Guy

What to know about community support versus vendor support

Fri, 12 Jun 2026 09:00:00 -0500

I wrote this for the CIQ blog: an honest look at when community Rocky Linux support covers you and when a production environment needs the vendor support RLC Pro adds.

RLC Pro AI and RLC Pro Hardened: Which variant fits your needs

Thu, 04 Jun 2026 09:00:00 -0500

I wrote this for the CIQ blog: how to choose between RLC Pro AI and RLC Pro Hardened depending on whether you are running AI infrastructure or working under strict compliance.

Rocky Linux and the Changing Secure Boot Landscape

Tue, 02 Jun 2026 09:00:00 -0500

I wrote this for Rocky Linux: Microsoft is rolling out new Secure Boot CAs and a KEK. Here is what changes and how to check your systems.

Rocky Linux Introduces a Security Repository and Why That Matters

Thu, 14 May 2026 09:00:00 -0500

I wrote this for Rocky Linux: an opt-in security repository that bridges the gap when a public exploit lands before upstream has a fix.

CopyFail (CVE-2026-31431): Kernel Patches Now Available for Rocky Linux

Mon, 11 May 2026 09:00:00 -0500

I put this out for Rocky Linux: patched kernels are available for 8.10, 9.7, and 10.1 addressing CopyFail. Update and reboot now.

Deploy RLC Pro on Google Cloud Marketplace

Fri, 10 Apr 2026 10:01:20 -0500

I wrote this deployment guide for CIQ, walking through how to get RLC Pro up and running on Google Cloud Marketplace from start to a live VM.

Deploy RLC Pro on AWS Marketplace

Wed, 08 Apr 2026 20:46:27 -0500

I wrote this guide for CIQ covering how to get RLC Pro running on AWS, from the Marketplace listing to a live EC2 instance with LTS and FIPS available.

CIQ at SCaLE 23x: Trip Report and Recap

Mon, 16 Mar 2026 09:01:00 -0500

I co-wrote this recap with Michael Young and R. Leigh Hennig covering CIQ’s presence at SCaLE 23x in Pasadena, and I was there in person as a speaker.

KernelCare: How Teams Stay Secure Without Reboots

Fri, 23 Jan 2026 09:00:00 -0600

I wrote this for TuxCare to explain, step by step, how KernelCare applies kernel patches to running memory so teams stay secure without rebooting.

The Future of Enterprise Linux: How Collaboration is Shaping the Next Era of Stability and Trust

Wed, 21 Jan 2026 09:00:00 -0600

I wrote this for TuxCare on how the end of CentOS Linux pushed enterprise Linux toward collaboration, transparency, and community-led stability.

Breqwatr Customer Story: TuxCare Radar

Fri, 12 Dec 2025 12:09:47 -0600

I produced this customer story for TuxCare, including the written case study and the short video summary below. Breqwatr builds OpenStack clouds for industries where infrastructure genuinely cannot…

KernelCare Agent v3: Upgrade Now for Signed Patch Security

Fri, 12 Dec 2025 09:00:00 -0600

I wrote this for TuxCare as the signed-patch switchover arrived, urging teams still on older KernelCare agents to upgrade to v3 before coverage gaps appear.

How to Build a FIPS + FedRAMP-Ready Environment in 2026: AlmaLinux & Rocky Linux

Mon, 01 Dec 2025 09:00:00 -0600

I wrote this for TuxCare on building a FIPS and FedRAMP-ready environment on community Linux, and how TES fills the gaps the base OS can’t.

Choosing the Right Enterprise Support Tier with TuxCare

Fri, 10 Oct 2025 09:00:00 -0500

I wrote this for TuxCare to break down the Essential, Enhanced, and Custom support tiers so teams can match coverage to their real risk profile.

TuxCare vs. Red Hat / SUSE / Canonical / Oracle: A Feature, Cost, and Performance Comparison

Wed, 08 Oct 2025 09:00:00 -0500

I wrote this for TuxCare: a fact-based comparison of TES against Red Hat, SUSE, Canonical, and Oracle across pricing, rebootless patching, and compliance.

KernelCare Agent v3 Has Arrived

Wed, 17 Sep 2025 09:00:00 -0500

I wrote this for TuxCare to announce KernelCare Agent v3, which introduces signed patch validation while keeping live patching disruption-free.

The New TuxCare Enterprise Support: Premium Coverage for AlmaLinux and Rocky Linux

Tue, 16 Sep 2025 09:00:00 -0500

I wrote this for TuxCare on the relaunch of Enterprise Support, which now covers AlmaLinux and Rocky Linux together with 24x7 support and compliance-ready patching.

What Is Patch Aware, and Why Should You Care?

Tue, 02 Sep 2025 09:00:00 -0500

I wrote this for TuxCare to explain what patch-aware scanning means, why traditional scanners get Linux wrong, and how it makes audits far less painful.

Using TuxCare's ePortal as a Proxy for Radar Scans

Tue, 26 Aug 2025 09:00:00 -0500

I wrote this for TuxCare to show how ePortal can proxy Radar scans, so locked-down fleets route data through one internal server instead of each host phoning home.

Best Practices for TuxCare Radar Security Scans

Tue, 19 Aug 2025 09:00:00 -0500

I wrote this for TuxCare on building real-world Radar routines, from tagging systems by risk zone to trading bloated spreadsheets for audit-ready reports.

What to Expect From Your First Scan with TuxCare Radar

Thu, 14 Aug 2025 09:00:00 -0500

I wrote this for TuxCare to set expectations for your first Radar scan, including why fewer results is a feature, not a bug.

Getting Started with Radar, TuxCare's Linux Vulnerability Scanner

Wed, 06 Aug 2025 09:00:00 -0500

I wrote this for TuxCare to introduce Radar, a lightweight, patch-aware CVE scanner for Linux that installs from the command line and skips the false positives.

Patching and Security Mitigation | Up and Running with Red Hat Satellite 03

Fri, 06 Sep 2024 09:00:00 -0500

In episode three, Richard and I recap the build so far and dig into patching, scheduled jobs, and CVE mitigation with Red Hat Satellite.

Passwordless Authentication with Yubico | RHEL Presents Ep. 80

Thu, 25 Jul 2024 09:00:00 -0600

Nate Lager and I sit down with Yubico’s Jonathan Hanlon and Dave Pham to add FIDO passkeys to RHEL users and log in with a YubiKey through Identity Manager.

Techniques to Troubleshoot SELinux | Into the Terminal 103

Fri, 12 Apr 2024 09:00:00 -0500

Reading denials from the audit log with ausearch and sealert.

What's New in RHEL 9.3 and 8.9

Wed, 15 Nov 2023 09:00:00 -0600

The webinar walkthrough of RHEL 9.3 and 8.9: image builder improvements, security and compliance updates, identity management, and easier day-two management from the web console.

Building Compliant Images with Image Builder | RHEL Presents Ep. 67

Thu, 19 Oct 2023 09:00:00 -0600

Terry Bowling, Amy Farley, and Mohit Goyal join us to show how Image Builder can bake compliance profiles right into your RHEL golden images.

Building Security-Compliant Images with Red Hat Enterprise Linux Image Builder

Wed, 04 Oct 2023 09:00:00 -0500

I show how to build security-compliant golden images with Image Builder and OpenSCAP profiles.

Introduction to Identity Manager | RHEL Presents Ep. 65

Thu, 07 Sep 2023 09:00:00 -0600

Nate Lager introduces Red Hat Identity Manager, the identity, permissions, and access layer that ships with RHEL, with demos and a zero trust framing.

Protecting your systems | Modernizing RHEL Management 05

Wed, 23 Aug 2023 09:00:00 -0500

The two services that drive a lot of Insights adoption: vulnerability management with security rules and known exploits, plus Yara-based malware detection.

Simplifying Patch Management | Modernizing RHEL Management 03

Wed, 09 Aug 2023 09:00:00 -0500

How Insights handles patching at fleet scale, from date-based patch templates to signed remediation playbooks you can run right from the UI.

Management Techniques 101 | Modernizing RHEL Management 01

Wed, 26 Jul 2023 09:00:00 -0500

The kickoff episode where John Spinks and I set the baseline on what Red Hat Insights is and how to get your systems connected.

Malware Detection with Red Hat Insights | RHEL Presents Ep. 55

Wed, 05 Apr 2023 09:00:00 -0500

RHEL Presents 55 on Insights malware detection.

Security: System Auditing | Into the Terminal 64

Fri, 31 Mar 2023 09:00:00 -0500

Configuring auditd and writing audit rules.

Security: Configuring Sudo Access | Into the Terminal 62

Fri, 17 Mar 2023 09:00:00 -0500

Writing safe rules with visudo and sudoers.d.

Security: CVE Mitigation | Into the Terminal 60

Fri, 03 Mar 2023 09:00:00 -0500

Assessing whether a CVE actually affects your systems.

Working with GPG Keys | Into the Terminal 38

Fri, 26 Aug 2022 09:00:00 -0500

Generating keys and signing or verifying data.

Overcoming vulnerabilities with live kernel patching in Red Hat Enterprise Linux 8.5

Thu, 18 Aug 2022 07:00:00 -0500

IT operations folks strive to not only maximize uptime but also keep systems patched. These might seem like competing goals, but we’re here to help with Live kernel patching in Red Hat Enterprise…

SSH Key Management | Into the Terminal 36

Fri, 05 Aug 2022 09:00:00 -0500

Generating key pairs and choosing a good algorithm.

Special Permissions and Access Control Lists | Into the Terminal 34

Fri, 22 Jul 2022 09:00:00 -0500

setuid, setgid, and the sticky bit, and why they matter.

What's New in RHEL 9 | RHEL Presents Ep. 38

Wed, 01 Jun 2022 09:00:00 -0500

RHEL Presents 38 on the RHEL 9 release.

Red Hat Insights | Into the Terminal 26

Thu, 26 May 2022 09:00:00 -0500

Registering systems and reading advisor recommendations.

Securing Data at Rest with LUKS and NBDE | RHEL Presents Ep. 36

Wed, 04 May 2022 09:00:00 -0500

RHEL Presents 36 on LUKS disk encryption and NBDE.

Session Recording | Into the Terminal 23

Thu, 28 Apr 2022 09:00:00 -0500

Capturing terminal sessions with tlog and SSSD.

SELinux Networking and Booleans | Into the Terminal 21

Thu, 14 Apr 2022 09:00:00 -0500

How SELinux handles ports and network access.

Patching Practices | Into the Terminal 19

Thu, 31 Mar 2022 09:00:00 -0500

Applying updates with dnf and understanding what changed.

SELinux | Into the Terminal 14

Thu, 24 Mar 2022 09:00:00 -0600

SELinux on RHEL without the fear: enforcing vs permissive vs disabled, how contexts and booleans work, and how to read a denial and fix it the right way.

Firewall | Into the Terminal 13

Wed, 23 Mar 2022 09:00:00 -0500

Zones, services, and ports in firewall-cmd.

sudo and su | Into the Terminal 12

Tue, 22 Mar 2022 09:00:00 -0500

The difference between su and sudo.

Managing SSH | Into the Terminal 05

Fri, 11 Mar 2022 09:00:00 -0500

Connecting and configuring the client and server sides.

File Permissions | Into the Terminal 02

Tue, 08 Mar 2022 09:00:00 -0500

Reading ls -l output without guessing.

Users and Groups | Into the Terminal 01

Mon, 07 Mar 2022 09:00:00 -0500

Creating and modifying accounts with useradd, usermod, and passwd.

Security Intelligence, RiskIQ | Sudo Show 28

Thu, 24 Jun 2021 09:00:00 -0500

Sudo Show 28 on security intelligence and attack-surface management.

Sunburst and Securing Your Supply Chain | Sudo Show 19

Thu, 18 Feb 2021 09:00:00 -0600

Sudo Show 19 on the Sunburst attack and software supply-chain security.

Sudo Vulnerability Discovered: How to Protect Your System From Baron Samedi

Thu, 28 Jan 2021 16:46:00 -0600

We tend to associate free with good. That’s not the case though when what is free is unauthorized root-level access to your Linux systems! On January 26, 2021, a vulnerability, CVE-2021-3156, was…

Looking at CrowdSec | Sudo Show 14

Mon, 14 Dec 2020 09:00:00 -0600

Sudo Show 14 on CrowdSec and collaborative, open-source security.