For some time now, I've been adding 'hidepid=2' to my systems to limit
process list access to the users that own the processes themselves.
I would like to propose that this be added to the SSG since it provides a
very straightforward mechanism for reducing system process enumeration by
regular users and/or rogue daemons.
Vice President, Onyx Point, Inc
(410) 541-6699 x788
-- This account not approved for unencrypted proprietary information --
Show replies by date