I discovered today from a security pundit that despite the separated VM,
processes' kernel segments are allocated all from the same pool, and thus
there is really no security across the kernel mem pool.  I don't remember
the mechanics of it all, but he demonstrably crashed my system by pointing
a process of his to skrog something in inetd, of all things.

If I can extricate more detail from him, I'll keep y'all posted.
It strikes me so odd that something like this is still a bug.

				--*greywolf;
--
*BSD: An Operating System For Everyone