Minimize installed software
Each application or command on a system is potentially a security hole that could provide unauthorized users a way to get into the system.
The PingDirectory software has a minimal set of dependencies. As a pure Java application, its primary dependency is the Java Virtual Machine (JVM). However, troubleshooting and support data collection tools might rely on other operating system utilities to obtain information about the state of the underlying system. On Linux, these tools include:
-
cat
-
crontab
-
df
-
dmesg
-
dstat
-
ethtool
-
gstack
-
ifconfig
-
iostat
-
ip
-
jinfo
-
jmap
-
journalctl
-
jps
-
jstack
-
ls
-
mpstat
-
netstat
-
pidstat
-
pmap
-
ps
-
pstack
-
sar
-
sh
-
ss
-
sysctl
-
systemctl
-
tail
-
top
-
tuned-adm
-
udevadm
-
uname
-
uptime
-
vmstat
Consider removing software that is not a critical part of the operating system, such as not needed to run the JVM, and that is not needed to run the previous troubleshooting and data collection tools.