Post #2429449

@argv_minus_one@mastodon.sdf.org Yeah, it's in-place modification that isn't needed and has no tools helping it (the C type system is not great, but it's actually possible to twist it into representing that usefully anyway). Going by anecdotal comments on the Orange Site, that interface really didn't belong in the kernel to start with. The recommendation to just disable it entirely sounds quite sensible. Don't need to hypervisor everything just to accomplish that. It did however contain the bug for everyone using virtualization as the security boundary instead of the mass ambient-authority kernel.