group kmem ~= root

Posted Apr 6, 2021 12:08 UTC (Tue) by michaelkjohnson (subscriber, #41438)
In reply to: Killing off /dev/kmem by markh
Parent article: Killing off /dev/kmem

Given the information available in /dev/kmem, setgid kmem is insignificantly different from setuid root. It feels better, but in the end it needs to be treated the same from a security perspective.