[lkml]   [1996]   [Mar]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Security Hole?
On  3 Mar 96 at 16:03, Andrew Mileski wrote:

> Wanted to get some EXPERT opinion on this...
> I've noticed that the linux kernel allows anyone to freely
> request/release IRQ, DMA, and I/O. Is this a security

Are these functions really available to user processes? I think only
kernel drivers should be able to use them. Otherwise you would have
to track the owner (PID).

> hole, or am I missing something that only allows root to
> do these things?
> I was considering giving each resource region a uid, with
> only root or the owner being allowed to change that region.
> Originally I was going to use the devname, but this is not
> secure enough, and things like the serial drivers might
> not like that.

I think PID would be more secure than UID, but usually UID is the

> Is it necessary to add anything for security? Or should
> the status quo be maintained?
> -- Andrew E. Mileski --
> -------------------------------------------------------
> Located in Canada's Capital: Ottawa! (EST)

 \ /
  Last update: 2005-03-22 13:36    [W:0.024 / U:2.640 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site