Restrict Access to the
Kernel Logs (dmesg)

kernel.dmesg_restrict = 1

By default, every user on a Linux system can read messages from the kernel, notably using the dmesg command. However, kernel logs can sometimes contain sensitive information or provide insight to attackers on the progress of their exploit. Our tip: Limit access to this interface to users with CAP_SYSLOG.