/* XXX: userspace can leak kernel resources */