lkml.org 
[lkml]   [2004]   [Aug]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: PATCH: cdrecord: avoiding scsi device numbering for ide devices
    Date
    From
    On Sat, 21 Aug 2004 14:50:08 +0200, you wrote in linux.kernel:

    > If the owners and permissions of the filesystem have been set up correctly,
    > then there is no security problem.

    The previous Linux implementation allowed users with *read* access
    to the device to send arbitrary SG_IO commands. Giving read permission
    to normal users is quite common, to allow them to run isosize or play
    their freshly burned SVCDs with mplayer.

    It violated the principle of least surprise that a user can screw
    the device without even having write permission.

    Yes, it breaks user-space programs, and yes, the kernel is to blame
    for its previous behavior, not user-space. However, now we need to
    get on, and going back to the previous behavior, which because
    the discussion is now a well-known security hole, is not an option.

    --
    Ciao,
    Pascal
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 14:05    [W:1.319 / U:0.556 seconds]
    ©2003-2014 Jasper Spaans. hosted at Digital Ocean