Re: enhance sysctl kern.expose_address

[David Holland <dholland-tech%netbsd.org@localhost>]

On Wed, Dec 05, 2018 at 08:47:58AM -0800, Jason Thorpe wrote:
 > Also, should PK_KMEM be inherited across fork?  What if a process
 > opens /dev/kmem, and then forks/execs a helper to do the work,
 > passing the file descriptor along with it?  #CanOfWorms

I would go so far as to say that non-root non-setugid processes
shouldn't be allowed to have file handles for /dev/kmem.

Then again I'd also say /dev/kmem shouldn't exist :-)

-- 
David A. Holland
dholland%netbsd.org@localhost