Process Hardening

• Restrict Core Dumps
• Enable Randomized Virtual Memory Region Placement

Restrict Core Dumps

Restricting Core Dumps

1. Add the below to the end of /etc/security/limits.conf
   
   root hard core 0
   
   
2. Add the below to /etc/sysctl.d/60-own.conf
   
   fs.suid_dumpable=0
   
   
3. Lastly, add the below to /etc/systemd/system.conf
   
   DumpCore=no

 

Enable Randomized Virtual Memory Region Placement

Randomized virtual memory region placement

1. Add the below line to /etc/sysctl.conf
   
   kernel.randomize_va_space = 2