Re: General flags to turn things off (getrandom, pid lookup, etc)

On 07/25/2014 11:30 AM, Andy Lutomirski wrote:

    - 32-bit GDT code segments [huge attack surface]
    - 64-bit GDT code segments [probably pointless]

I presume you mean s/GDT/LDT/.

We already don't allow 64-bit LDT code segments.  Also, it is unclear to
me how 32-bit LDT segments have a huge attack surface, given that there
will realistically always be a 32-bit *GDT* segment present.

	-hpa