arcan
arcan copied to clipboard
(platform) descriptor randomization
In order to protect the shmpage to be easy to predict and access from a sandbox, the descriptor should be duped to a random position to work around the sparse allocation behavior of open.