lkml.org 
[lkml]   [1999]   [Jun]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: immutable flag on ext2fs
DateMon, 21 Jun 1999 22:39:46 +0100 (BST)
FromAlan Cox <>
> > There is a proper way to solve this. Use 2.0.37 and redefine the securelevel
> > to read from a parallel port or similar and check for a magic code. Now you
> > can wire yourself a superuser enable dongle .
>
> Care to elaborate on this a bit?

On a PC the lp data port is a single readable register normally living
on a side bus of the PCI chipset (so fast). Just read it and check it
is some specific magic value.

> adapter to do a smartcard/dongle kind of thing for some crypto work. For
> a laptop, this helps keep things like keys off the box and transportable
> Sounds like a similar idea to the parallel port idea.

Very, although its harder to check instantly in kernel. I guess you'd have
to put in code that allows key based changing of securelevel via an ioctl

> What about 2.2? I noticed that the capabilities stuff is largely
> supplanting the securelevel idea.

They are simply more fine grained. Chris Evans has found a couple of problems
with the current model but they are fixable

Alan

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:52    [from the cache]
©2003-2010