blog.up-link.ro android bsd linux unix & open-source world

24Apr/102

FreeBSD: How To Prevent Users from seeing information about processes owned by others

FreeBSD has inbuilt security measure to disallow users to see processes that are being run under another UID to avoid information snooping. To enable this security feature via sysctl, type the following commands:

sysctl security.bsd.see_other_uids=0
sysctl security.bsd.see_other_gids=0

To enable this security feature on boot, add the following lines to /etc/sysctl.conf:

# Hide UID and GID from other users
security.bsd.see_other_gids=0
security.bsd.see_other_uids=0
Comments (2) Trackbacks (0)
  1. anyone know if there is a similar option in linux?

  2. At last we have the equivalent of security.bsd.see_other_uids in Linux without the need to mess around with grsecurity. This feature can be enabled if you have kernel 3.3. Read here for more information: https://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git;a=commit;h=0499680a42141d86417a8fbaa8c8db806bea1201


Leave a comment


No trackbacks yet.