[lkml]   [2004]   [Aug]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: PATCH: cdrecord: avoiding scsi device numbering for ide devices
    On Aug 20, 2004, at 09:41, Joerg Schilling wrote:
    >> While Sun did spend a year refusing to fix security holes I found -
    >> for
    >> "compatibility reasons" - long ago back when I was a sysadmin at NTL,
    >> the Linux world does not work that way.
    > Unless you tell us what kind of "security holes" you found _and_ when
    > this has
    > been, it looks like a meaningless remark.

    Further discussion on such a topic is irrelevant. There is at least
    one case
    where a vendor has chosen compatibility over security (*cough* *cough*
    Windows *cough*). From the previous emails on the issue, the general
    opinion of most Linux developers is to choose security over
    after all, with free software users are free to fix the

    Security issue:
    Anybody with read access to certain block devices (Like CD-RW
    drives.) could reflash the firmware or otherwise turn the drive into a
    rather expensive doorstop.

    Chosen solution for
    Only allow certain known-safe commands, anything else needs
    root privileges, specifically CAP_SYS_RAWIO or CAP_SYS_ADMIN,
    (Seems sane, and follows with the general design of the rest of the

    Problems with the solution:
    It breaks software, *whine*! Well, if Microsoft suddenly fixed all
    the remaining security flaws in its software, almost _all_ Windows
    software would break, because they depend on silly things like writable
    files on the root of the C drive. Just because software does something
    doesn't mean it's secure.

    Personally, I'd rather have a setuid executable on my system than
    allow anybody in the cdwriters group to reflash my CDROM drive. For
    you there is a _really_ simple solution akin to the warning message
    that already exists in linuxcheck(), if the version is >= 2.6.8, just
    the user that it's unsupported and won't work without a patched
    kernel. That's a change that could even go in during a code freeze!

    Kyle Moffett

    Version: 3.12
    GCM/CS/IT/U d- s++: a17 C++++>$ UB/L/X/*++++(+)>$ P+++(++++)>$
    L++++(+++) E W++(+) N+++(++) o? K? w--- O? M++ V? PS+() PE+(-) Y+
    PGP+++ t+(+++) 5 X R? tv-(--) b++++(++) DI+ D+ G e->++++$ h!*()>++$ r
    ------END GEEK CODE BLOCK------

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 14:05    [W:0.045 / U:1.152 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site