iptables

arptables

ipmitables

eth2tables

ip6tables

ebtables

nftables

ip4tables

udptables

tcptables

none of them

Hardware only

neither Hardware nor Software

Software only

Hardware and Software

using a proprietary compiler, specifically hardened

using coding guidelines such as the ones in the framework ATTACK

using only POSIX functions for the interface with the system libraries

using an open-source compiler with hardening options

using any compiler, since hardening is provided by the operating system

using thread-safe libraries

php scripts run by apache web server

root-mounted removable devices

partitions and disks with no available space

set-userid programs and shell scripts

set-groupid programs and shell scripts

capabilities

forged ICMP paquets

members of the sudo group

GRSecurity

misconfigured containers

SELinux

files owned by root and readable by others

files owned by root and writeable by others

Kali

RedHat

Debian

Ubuntu

Arch

Hardened Gentoo

SuSE

Alpine

only for network components with software

yes

no

only for network components with hardware