Process Hardening



Restrict Core Dumps

Ensure core dumps are restricted

Edit the /etc/security/limits.conf and /etc/sysctl.conf files, adding the lines below

/etc/security/limits.conf

=========================

* hard core 0

/etc/sysctl.conf

================

fs.suid_dumpable = 0

Active kernel parameter

Active the kernel parameter by running the following command

sysctl -w fs.suid_dumpable=0Enable Randomized Virtual Memory Region Placement

Randomized virtual memory region placement

Add the line below to the /etc/sysctl.conf file

kernel.randomize_va_space = 2