2021年1月4日 星期一

Linux proc hidepid 摘要

hidepid=0 – The default behavior where any user can read the files under /proc/PID/
hidepid=1 – It means users may not access any /proc/PID/ sub-directory except their own. Also files like cmdline, io, sched*, status, wchan are inaccessible to other users.
hidepid=2 – Everything from hidepid=1, plus all /proc/PID/ sub-directories will be hidden to other users.


sudo mount -o remount,rw,hidepid=2 /proc

沒有留言: