gyptazy
@gyptazy@gyptazy.ch
security.bsd.see_other_uids=0
security.bsd.see_other_gids=0
security.bsd.see_jail_proc=0
security.bsd.unprivileged_read_msgbuf=0
security.bsd.unprivileged_proc_debug=0
kern.randompid=1
Beside this, running services in jails and keeping software up to update. All of this is already a pretty good way. You may also want to check pf (firewall) since your system is probably directly reachable from the internet. So, scrubbing the traffic and firewalling may also be an improvement.