Hi All,

For some time now, I've been adding 'hidepid=2' to my systems to limit
process list access to the users that own the processes themselves.

I would like to propose that this be added to the SSG since it provides a
very straightforward mechanism for reducing system process enumeration by
regular users and/or rogue daemons.

Thanks,

Trevor

-- 
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699 x788

-- This account not approved for unencrypted proprietary information --
_______________________________________________
scap-security-guide mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to