Messages in this thread | | | Date | Thu, 14 Jul 2011 23:42:48 +0100 | From | Alan Cox <> | Subject | Re: [PATCH 2/2] x86: Allow disabling of sys_iopl, sys_ioperm |
| |
On Thu, 14 Jul 2011 13:34:53 -0700 Mike Waychison <mikew@google.com> wrote:
> In some build environments, it is useful to allow disabling of IO > accesses to hardware, without having to rely on CAP_SYS_RAWIO (which is
And others include mmap and the tty driver and the PCI config space (various devices can be manipulated via pci config space to do I/O cycles)
It strikes me that
a) you can do this with a security module b) its rather incomplete
and as such you don't need kernel hacks to do it because everything you want is already there.
Alan
| |