Some pseudofiles under /proc are only readable by the user running the process, and of course root can read everything. So it’s the standard Unix security model, afaics.
For example, any process’ command-line arguments are famously visible to everyone, while the environment variables only to the user of the process.
I might be mistaken, but I think kvm stands for kernel virtual machine. Having no /proc, and interacting with sysctl instead sounds more secure, IMO.
Some pseudofiles under /proc are only readable by the user running the process, and of course root can read everything. So it’s the standard Unix security model, afaics.
For example, any process’ command-line arguments are famously visible to everyone, while the environment variables only to the user of the process.