you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 2 months ago (1 child)

I might be mistaken, but I think kvm stands for kernel virtual machine. Having no /proc, and interacting with sysctl instead sounds more secure, IMO.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 2 months ago

    Some pseudofiles under /proc are only readable by the user running the process, and of course root can read everything. So it's the standard Unix security model, afaics.

    For example, any process' command-line arguments are famously visible to everyone, while the environment variables only to the user of the process.

  • source
  • parent