# Process Hardening



# Restrict Core Dumps

### Ensure core dumps are restricted

1. Edit the /etc/security/limits.conf and /etc/sysctl.conf files, adding the lines below

```
/etc/security/limits.conf
=========================

* hard core 0

/etc/sysctl.conf
================

fs.suid_dumpable = 0
```

### Active kernel parameter

1. Active the kernel parameter by running the following command

```
sysctl -w fs.suid_dumpable=0
```

# Enable Randomized Virtual Memory Region Placement

### Randomized virtual memory region placement

1. Add the line below to the /etc/sysctl.conf file

```
kernel.randomize_va_space = 2 
```