How to Secure a Linux Server

Re:How to Secure a Linux Server by rasengan on Saturday February 16, 2019 @10:15AM (#19178889)

It would also be proper to disable non root access to /proc among other things. You can do that by simply mounting with hidepid=2 or adding it to fstab.

[ Parent | on HN ]

Re:How to Secure a Linux Server by shereadsthenews on Saturday February 16, 2019 @11:10AM (#19179233)

Why? Disabling access to /proc will disable a huge number of useful features, such as the ability of a process to monitor and manage its memory usage, to debug itself, and so forth.

[ Parent | on HN ]

Re:How to Secure a Linux Server by mbaeten on Saturday February 16, 2019 @01:48PM (#19180213)

For example, /proc/self/pagemap can be used for rowhammer attacks.

Source: Another flip in the wall of rowhammer defenses (IEEE S&P 2018)

[ Parent | on HN ]

Re:How to Secure a Linux Server by imthenachoman on Monday February 18, 2019 @03:46PM (#19194281)

Interesting. I have never read that anywhere. I will research. TY!

[ Parent | on HN ]