search

imthenachoman / How-To-Secure-A-Linux-Server

An evolving how-to guide for securing a Linux server.
Creative Commons Attribution Share Alike 4.0 International
17.38k stars 1.11k forks source link

hidepid=2 unsupported by systemd #37

Closed nlgranger closed 3 years ago

nlgranger commented 5 years ago

Sadly, systemd seems to assume /proc is mounted with hidepid set to its default value in order to function properly. See:

Considering the widespread use of systemd nowadays, I suppose you might want to add a notice for its user.

imthenachoman commented 5 years ago

Will do. Just started a new job so a little behind with updates but will get to it soon. Thanks!

imthenachoman commented 3 years ago

So it seems to be working fine on my machine but I will add a note. Thanks!

imthenachoman commented 3 years ago

Has it broken anything for you? I just redid my server and so far haven't had any issues with hidepid. Wondering if they fixed the bug?

DonPicciotto commented 3 years ago

Has it broken anything for you? I just redid my server and so far haven't had any issues with hidepid. Wondering if they fixed the bug?

It broke something for me, my pi-hole FTL stop working if I mount /proc with hidepid

maverickg59 commented 1 year ago

Here's a nifty explanation from the Red Hat Customer Portal on why mounting /proc on hidepid=2 isn't a great idea in RHEL 7+. They do mention that eventually it may become an option.

https://access.redhat.com/solutions/6704531