3 ms·
It would also be proper to disable non root access to /proc among other things. You can do that by simply mounting with hidepid=2 or adding it to fstab.
by rasengan 8y ago
It would also be proper to disable non root access to /proc among other things. You can do that by simply mounting with hidepid=2 or adding it to fstab.
- shereadsthenews 8y agoWhy? Disabling access to /proc will disable a huge number of useful features, such as the ability of a process to monitor and manage its memory usage, to debug itself, and so forth.
- mbaeten 8y agoFor example, /proc/self/pagemap can be used for rowhammer attacks. Source: Another flip in the wall of rowhammer defenses (IEEE S&P 2018)
- imthenachoman 8y agoInteresting. I have never read that anywhere. I will research. TY!