# Process Hardening



# Restrict Core Dumps

### Restricting Core Dumps

1. Add the below to the end of /etc/security/limits.conf  
      
    `root hard core 0`
2. Add the below to /etc/sysctl.d/60-own.conf  
      
    `fs.suid_dumpable=0`
3. Lastly, add the below to /etc/systemd/system.conf  
      
    `DumpCore=no`

# Enable Randomized Virtual Memory Region Placement

### Randomized virtual memory region placement

1. Add the below line to /etc/sysctl.conf  
      
    `kernel.randomize_va_space = 2`