I've had this feature request open for a while at
https://github.com/OpenSCAP/scap-security-guide/issues/1648 suggesting that
hidepid=2 be added to /proc to help meet the AC-3 and AC-6 controls.
As we approach EL8 (I think), I'd like to have this discussion since this
capability has shown to be valuable in a practical way on multi-user
systems.
Thanks,
Trevor
--
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699 x788
-- This account not approved for unencrypted proprietary information --