Process Hardening

Restrict Core Dumps

Ensure core dumps are restricted

  1. Edit the /etc/security/limits.conf and /etc/sysctl.conf files, adding the lines below
/etc/security/limits.conf
=========================

* hard core 0

/etc/sysctl.conf
================

fs.suid_dumpable = 0

Active kernel parameter

  1. Active the kernel parameter by running the following command
sysctl -w fs.suid_dumpable=0

Enable Randomized Virtual Memory Region Placement

Randomized virtual memory region placement

  1. Add the line below to the /etc/sysctl.conf file
kernel.randomize_va_space = 2