lkml.org 
[lkml]   [2002]   [Dec]   [10]   [last100]   RSS Feed
Views: [more markup]   [less markup]   [headers]   [forward]  
 
Messages in this thread
/
FromDavid Schwartz <>
DateMon, 9 Dec 2002 22:27:23 -0800
SubjectRe: capable open_port() check wrong for kmem
On 10 Dec 2002 05:45:09 GMT, David Wagner wrote:

>carbonated beverage  wrote:

>>    I found that I can't open /dev/kmem O_RDONLY.  The open_mem
>>and open_kmem calls (open_port()) in drivers/char/mem.c checks for
>>CAP_SYS_RAWIO.

>>    Is there a possibility of splitting that off into a read and
>>write pair, i.e. CAP_SYS_RAWIO_WRITE, CAP_SYS_RAWIO_READ?

>Read-only access to /dev/kmem is probably enough to get root access
>(maybe you can snoop root's password, for instance).  This would make
>the power of the two capabilities roughly equivalent, so if this is true,
>I'm not sure I understand the point of splitting them in two this way.

	Many capabilities can be leveraged into root access with sufficient 
cleverness. If this were considered a sufficient argument for merging 
capabilities, we'd have far fewer of them.

	DS


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 11:31    [W:0.266 / U:0.040 seconds]
©2003-2008 Jasper Spaans