Networking
Diagnose conntrack exhaustion and validate capacity changes
Failed new connections can originate in the connection-tracking table rather than the application. Correlate occupancy and failure counters, then test a bounded capacity change.
Data center
Isolate service secrets and verify rotation with systemd credentials
Pass secrets to a dedicated service account with LoadCredential, build a validator that never prints sensitive values, and test rotation and recovery.
Data center
Diagnosing SELinux denials: from AVC records to file-label repair
Diagnose access to a custom httpd document root on AlmaLinux 9, persist the correct labels and verify that restoring service does not weaken access controls.