# internal/platform/processguard

Package processguard hardens the scafld process while it handles secrets. On Linux, DisableDumpable stops same-user child processes from reading it through procfs, such as its environment.

## DisableDumpable

```go
func DisableDumpable() (func(), error)
```

DisableDumpable prevents same-uid child processes from reading this process through ptrace-gated procfs files such as /proc/$PPID/environ.