procfs
 

Hello all,

When I was tweaking my server I always get sysctl var kern.ps_showallprocs to 0 so no one see other processes.. but as I see the procfs (mounted at /proc) has many information readable for anyone about all processes on the system (yes including the root ones), any newb with a script would make a ps/top with more information than the ps itself.

I wounder if is there any kernel option or sysctl variable for owning and protect the pid information from other users including root, in the procfs. If anyone knows anything about this, i would apreciate your help!

If not, post your opinion on how to tweak the procfs so it won't show any important pid information.

Thanks for all your precious time!

Alex

Maybe you'll find grsecurity project to be useful for you.