On Sun, 08 Nov 2015 12:30:47 +0100, Theo Buehler wrote:
> * We can make a pledge("id") at the start. Drop this after setrlimit(2)
> * Try to find the kmem group early on and use setegid(2) instead of
> initgroups(2). Pass kmem's gid as an argument to kvm_mkdb().
> * If the kmem group wasn't found, don't try to chown in kvm_mkdb()I like this approach. OK millert@ - todd
