Messages in this thread | | | Date | Thu, 12 Aug 2004 13:01:48 -0400 | From | Jeff Garzik <> | Subject | Re: SG_IO and security |
| |
Jeff Garzik wrote: > Linus Torvalds wrote: > >> >> On Thu, 12 Aug 2004, Linus Torvalds wrote: >> >>> Hmm.. This still allows the old "junk" commands >>> (SCSI_IOCTL_SEND_COMMAND). >> >> >> >> Btw, I think the _right_ thing to check is the write access of the >> file descriptor. If you have write access to a block device, you can >> delete the data, so you might as well be able to do the raw commands. >> And that would allow things like "disk" groups etc to work and burn CD's. > > > > Define raw commands. I certainly don't want non-root users to be able > to issue FORMAT UNIT on my hard drive.
oh, to the block device, not the file.
nevermind.
Jeff
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |