lkml.org 
[lkml]   [1998]   [Aug]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: DEVFSv50 and /dev/fb? (or /dev/fb/? ???)
    On Wed, 19 Aug 1998, Terry L Ridder wrote:
    > > Hm. OK. That's something that I could do with devfsd. However, it
    > > still seems to me that loading a driver should never compromise your
    > > system. If it does the driver is broken.
    >
    > In a perfect world that may be true, since however we live in an
    > imperfect
    > world, and we all make mistakes, security will probably continued to be
    > compromised by drivers/daemons/etc. When a problem is discovered they
    > are fixed. So yes in a perfect world a driver/daemon/etc should
    > compromise
    > a system, however in the imperfect world we live in they do.

    Don't blame DevFS for driver breakage, you are simply pointing fingers,
    and you are unable to make intelligent judgements in the fist place.

    > > Well, I cover the reasons in the FAQ. One other reason I should get
    > > around to adding: security. I expect many systems will not want to
    > > change device permissions (the drivers provide sensible defaults). In
    > > that case if some random hacker frobs the permissions on /dev/sda*
    > > then the next reboot gives you back the default (safe) permissions.
    >
    > This to me seems like a really bad idea.
    > Once a system has been compromised it would seem that you would
    > want to keep as much "evidence" as possible. Resetting the
    > permissions at the next reboot would be destroy some "evidence".
    > This may also be the only piece of "evidence" that is readily visible.

    The evidence is in how the f*cker got root in the first place. Simply
    putting /dev/sd? back the way it should be is not a bad idea. Again,
    evidence that you are incapable of rational thought.

    -Shawn
    <=========== America Held Hostage ===========>
    Day 2037 for the poor and the middle class.
    Day 2056 for the rich and the dead.
    885 days remaining in the Raw Deal.
    <============================================>


    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.rutgers.edu
    Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html

    \
     
     \ /
      Last update: 2005-03-22 13:44    [W:3.799 / U:0.008 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site