In some email I received from Jason Thorpe, sie wrote:
> 
> On Mon, 21 Jun 1999 17:06:27 +1000 (EST) 
>  Darren Reed <darrenr@reed.wattle.id.au> wrote:
> 
>  > Ummm, I used uses sysctl() to get process information rather than
>  > kvm_getprocs() (which I suspect uses sysctl() or at least could).
> 
> Hm, I guess I missed that.
> 
> Anyhow, you should use kvm_getprocs() so that it works on crash dumps.
> 
> (kvm_getprocs() uses sysctl on live kernels.)

While I think of it, on a semi-related note, how close is ps(1) to being
not-setgid with both procfs & sysctl's?