Restrict Hardware Information to Root - Testers Wanted!

[madaidan]

@SokPuppette

But you can also configure the hypervisor to try to emulate a specific CPU of your choice

Restrict hardware information to root

At the moment I pass thru all CPU flags from the host to the guest to allow the guest kernel spectre/meltdown protections to kick in. Restricting this info to root is a great step. Also preventing unprivileged processes from enumerating info from /proc/pid does make it harder for rowhammer attacks:

@SokPuppette

Do you know of anything that passes through an actual serial number?

No, the hypervisor hides serial numbers. This feature is just for other less important hardware info.