From 66c1763738ecc02ccd9aecca555567ecda79420d Mon Sep 17 00:00:00 2001 From: trimstray Date: Wed, 14 Nov 2018 14:12:57 +0100 Subject: [PATCH] minor updates and fixes - signed-off-by: trimstray --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index b941ce1..cabef80 100644 --- a/README.md +++ b/README.md @@ -493,7 +493,7 @@ This will deny binary execution from **/tmp**, disable any binary to be suid roo ```bash mv /var/tmp /var/tmp.old ln -s /tmp /var/tmp -cp -prf /var/tmp.old /tmp && rm -fr /var/tmp.old +cp -prf /var/tmp.old/* /tmp && rm -fr /var/tmp.old ``` and set properly mount params: @@ -550,7 +550,7 @@ tmpfs /dev/shm tmpfs rw,nodev,nosuid,noexec 0 0 #### :eight_pointed_black_star: Secure /proc filesystem -The proc pseudo-filesystem `/proc` should be mounted with hidepid. When setting `hidepid` to **2**, directories entries in `/proc` will hidden. +The proc pseudo-filesystem `/proc` should be mounted with `hidepid`. When setting `hidepid` to **2**, directories entries in `/proc` will hidden. ```bash proc /proc proc defaults,hidepid=2 0 0