> Any suggestions what to do in the short term about these kvm-grovellers? > lsof isn't so important, the only port depending on it is a tor connection > monitor thingy, libgtop2 affects more things, but the fix is likely to be > the same for both.
the rather ugly solution may be to link that tree code into libkvm. the RIGHT solution would be for some unidentified person to go on a mission, converting these utilities to use the sysctl interfaces, and stop snooping kvm.