hide-hardware-info.service: hide /proc/dynamic_debug/

[wryMitts]

This is a file I would normally expect to be restricted by kernel.dmesg_restrict = 1 yet I can still read it on my system. Leaks hardware info, kernel module info.

Permissions of this file /proc/dynamic_debug/control are 644.

See also:
https://www.kernel.org/doc/html/v4.12/admin-guide/dynamic-debug-howto.html

[adrelanos]

Might get fixed if the following feature was implemented:

• remount-secure: use procfs mount option subset (hide-hardware-info.service) #205