Messages in this thread | | | Date | Thu, 14 Mar 2002 15:12:00 +0000 | From | Pavel Machek <> | Subject | Re: [patch] My AMD IDE driver, v2.7 |
| |
Hi!
> Well, there are uses for the 'dynamic' filter, and it doesn't add too > much complexity. One could be allowing certain commands to be performed > on certain devices by normal users - eg. CD-burning or whatever without
That should be better done userspace: setuid on cdrecord + its security audit seems like nice solution.
> root privileges (I know we're using ide-scsi for the command access > right now ...), and also protecting the oneself from ACPI and the like. > Because ACPI can do IDE commands and does that in a way interfaceable to > a 'taskfile' kernel ioctl. It'd be nice to know a broken ACPI > implementation can't screw up your drive easily through a kernel driver.
This is entirely different can of worms, and should be easy to do at ACPI level. Pavel -- Philips Velo 1: 1"x4"x8", 300gram, 60, 12MB, 40bogomips, linux, mutt, details at http://atrey.karlin.mff.cuni.cz/~pavel/velo/index.html.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |