# restrict access to /proc/<pid>/maps and smaps
kernel.maps_protect = 1
