[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

System hardening: adding hidepid to /proc?

Good day Guys

I came across this document:


The idea is to increase security by hiding the display of running
processes, and their arguments, which belong to other users. This helps
avoid problems if users enter passwords on the command-line, and similar.

Its suggesting mount /proc with the option hidepid=2.

I would like to ask:

1) is it safe?

2) did you incur any issues?

3) what are your thoughts

The security audit tool, Lynis, also checks to see if /proc is mounted

[+] File systems
  - Checking mount points


  - Testing /proc mount (hidepid)                             [ OK ]

Many thanks


P.s. I see its not suggested in the ''Securing Debian Manual"

Reply to: