[lkml]   [1996]   [Mar]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: Security Hole?
    On  3 Mar 96 at 16:03, Andrew Mileski wrote:

    > Wanted to get some EXPERT opinion on this...
    > I've noticed that the linux kernel allows anyone to freely
    > request/release IRQ, DMA, and I/O. Is this a security

    Are these functions really available to user processes? I think only
    kernel drivers should be able to use them. Otherwise you would have
    to track the owner (PID).

    > hole, or am I missing something that only allows root to
    > do these things?
    > I was considering giving each resource region a uid, with
    > only root or the owner being allowed to change that region.
    > Originally I was going to use the devname, but this is not
    > secure enough, and things like the serial drivers might
    > not like that.

    I think PID would be more secure than UID, but usually UID is the

    > Is it necessary to add anything for security? Or should
    > the status quo be maintained?
    > -- Andrew E. Mileski --
    > -------------------------------------------------------
    > Located in Canada's Capital: Ottawa! (EST)

     \ /
      Last update: 2005-03-22 13:36    [W:0.042 / U:154.148 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site