3 ms·
It's probably a trivial modification to disable KPTI for root owned processes.
by tedunangst 9y ago
It's probably a trivial modification to disable KPTI for root owned processes.
- eecc 9y agoOr signed binaries that don’t execute user provided code, although there is still the potential to turn a local buffer overflow into a VM breakout... don’t think VPS provides will take that risk