https://umair-as.github.io/blog/series/hardening-otbr/Recent content in Hardening OTBR on Umair's Systems NotebookHugoen-usTue, 14 Apr 2026 00:00:00 +0000https://umair-as.github.io/blog/posts/otbr-systemd-hardening/Tue, 14 Apr 2026 00:00:00 +0000https://umair-as.github.io/blog/posts/otbr-systemd-hardening/Part 1 got OTBR running as a non-root user with three capabilities. Part 2 covers the hardening block in the service file — what each directive does, why one had to be an exception, and how to use systemd-analyze security as a decision tool rather than a score to chase. Part 2 of 2.https://umair-as.github.io/blog/posts/running-otbr-as-non-root/Tue, 14 Apr 2026 00:00:00 +0000https://umair-as.github.io/blog/posts/running-otbr-as-non-root/OpenThread Border Router assumes it runs as root. Getting it down to a least-privilege non-root user means figuring out exactly what it needs — which turned out to be a source code problem, not a trial-and-error problem. Part 1 of 2.