I've had this feature request open for a while at https://github.com/OpenSCAP/scap-security-guide/issues/1648 suggesting that hidepid=2 be added to /proc to help meet the AC-3 and AC-6 controls.

As we approach EL8 (I think), I'd like to have this discussion since this capability has shown to be valuable in a practical way on multi-user systems.



Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699 x788

-- This account not approved for unencrypted proprietary information --