Permission Drift Is Killing Your Automation — Building permguard for Fleet-Wide Script Hardening (OpenClaw AI Agents Included)Day 4 of 100 Days of DevOps Permission drift is the silent killer of production automation. You deploy a script with chmod 755, and three months later it's 000 or 777. Your cron job fails at 2 AM, youMar 5 · 5 min readsaharshpamecha.hashnode.dev
SSH Hardening with ssh-shield: Automating CIS ComplianceDirect root SSH login is a security anti-pattern. Every CIS Benchmark, every NIST guideline, and every breach post-mortem tells you to disable it. Yet I still see it enabled in production environmentsMar 4 · 5 min readsaharshpamecha.hashnode.dev
expiry-guard: Managing Temporary Linux User Accounts with Automatic ExpiryDay 2 of 100 Days of DevOps Introduction Every production environment has them. Contractors who need temporary access. Consultants brought in for specific projects. Developers rotating through on-calMar 3 · 4 min readsaharshpamecha.hashnode.dev
Refreshing Linux Service Account Fundamentals: Non-Interactive Shell Best PracticesProbably this is my first deep-dive blog post! I have always been mostly spending my time as a spectator in the tech space — keenly following, learning, internalizing... but never really had the guts Mar 2 · 6 min readsaharshpamecha.hashnode.dev
