Many commands accepts username and passwords on the command line and ps, top, sockstat and many commands can display this information to all users on the system. How do I prevent users from seeing information about processes that are being run under another UID to avoid information leakage under FreeBSD operating systems?
FreeBSD has inbuilt security measure to disallow users to see processes run by other users (UID) to avoid information leakage (snooping). The MIB security.bsd.see_other_uids and security.bsd.see_other_gids needs to set to zero (0) to enable this security feature via sysctl. Type the following command to enable this feature on boot:
# echo 'security.bsd.see_other_uids=0' >> /etc/sysctl.conf
# echo 'security.bsd.see_other_gids=0' >> /etc/sysctl.conf
Type the following to turn it on immediately, enter:
# sysctl security.bsd.see_other_uids=0
# sysctl security.bsd.see_other_gids=0
Now normal users cannot see what other people or groups are running on the system. This also applies to all jailed systems.
- RSS feed or Weekly email newsletter
- Share to Twitter • Facebook • 9 comments... add one ↓
FreeBSD Install vnStat: A Console-Based Network Traffic Monitor
Default robots.txt File For Web-Server
Linux Find Out Name Of DVD / CD-ROM / Blu-ray Writer Device
FreeBSD Unix Find Out Which Programs Are Listening On a Given Port Number
Linux / Unix id Command Examples
How to add an extra second hard drive on Linux LVM and increase the size of storage
Linux / UNIX: Generating Random Password With mkpasswd / makepasswd / pwgen
| Category | List of Unix and Linux commands |
|---|---|
| File Management | cat |
| Firewall | CentOS 8 • OpenSUSE • RHEL 8 • Ubuntu 16.04 • Ubuntu 18.04 • Ubuntu 20.04 |
| Network Utilities | dig • host • ip • nmap |
| OpenVPN | CentOS 7 • CentOS 8 • Debian 10 • Debian 8/9 • Ubuntu 18.04 • Ubuntu 20.04 |
| Package Manager | apk • apt |
| Processes Management | bg • chroot • cron • disown • fg • jobs • killall • kill • pidof • pstree • pwdx • time |
| Searching | grep • whereis • which |
| User Information | groups • id • lastcomm • last • lid/libuser-lid • logname • members • users • whoami • who • w |
| WireGuard VPN | CentOS 8 • Debian 10 • Firewall • Ubuntu 20.04 |
Great.. I use FreeBSD server at my office and was looking for something like this.
is it possible to implement same feature in RHEL/CentOS ?
It´s not a BSD only feature. You will find the same feature in Caos Linux.
Will you please let me know exact procedure/web link to get the information..Thanks in Advance.
It is not part of standard Linux kernel. You need GRSecurity patch for Linux kernel (which is included with Caos Linux). Go to http://www.grsecurity.net/ and download patch. You need to recompile the kernel. Alternatively, downloaded prebuilt rpms for CentOS / RHEL below:
http://rpm.cormander.com/repo/grsec/
Hi Vivek,
I have downloaded latest .rpm and installed the same on my test CentOS 5.3(i386) system. Will you please let me me what to do next to get the expected functionality ? Thanks.
This should be saying:
# echo ‘security.bsd.see_other_uids=0’ >> /etc/sysctl.conf
# echo ‘security.bsd.see_other_gids=0’ >> /etc/sysctl.conf
and not /etc/rc.conf
@ warren
Thanks for the heads-up!
can you plz let me know how to make this configuration in Redhat Linux 5.