That sounds interesting.
Can you elaborate on which attacks userland system are susceptible to that a kernel is not?
Can you elaborate on which attacks userland system are susceptible to that a kernel is not?
Also reading /proc/nnnn/mem does not work even for your own processes and even though file node protections seem to allow it, not sure where that security enhancement comes from.