lkml.org 
[lkml]   [1996]   [Mar]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Date
SubjectRe: Security Hole?
On  3 Mar 96 at 16:03, Andrew Mileski wrote:

> Wanted to get some EXPERT opinion on this...
>
> I've noticed that the linux kernel allows anyone to freely
> request/release IRQ, DMA, and I/O. Is this a security

Are these functions really available to user processes? I think only
kernel drivers should be able to use them. Otherwise you would have
to track the owner (PID).

> hole, or am I missing something that only allows root to
> do these things?
>
> I was considering giving each resource region a uid, with
> only root or the owner being allowed to change that region.
> Originally I was going to use the devname, but this is not
> secure enough, and things like the serial drivers might
> not like that.

I think PID would be more secure than UID, but usually UID is the
way.

>
> Is it necessary to add anything for security? Or should
> the status quo be maintained?
>
> -- Andrew E. Mileski --
>
> -------------------------------------------------------
> Located in Canada's Capital: Ottawa! (EST)
> mailto:dmtech@magi.com http://www.magi.com/~dmtech/
>
>


\
 
 \ /
  Last update: 2005-03-22 13:36    [from the cache]
©2003-2011 Jasper Spaans