lkml.org 
[lkml]   [1998]   [Jul]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH] New phys_addr() syscall
    Olivier Galibert writes:
    > On Sun, Jul 19, 1998 at 02:24:15PM +0200, Alexander Kjeldaas wrote:
    > > I this is only useful for specialized utilities, I suggest you check
    > > for capable(CAP_SYS_ADMIN) in the system call.
    >
    > Relying of the fact that a process not having the capability is unable
    > to know the physical address of a virtual page is nothing but security
    > through obscurity. Linux' security is not snake oil.
    >
    > Besides, it would require to give a special capability to process
    > needing the system call for nothing more than display purposes, which
    > increases the number of potential security flaws while not adding real
    > security.
    >
    > Hence, bad idea.

    Amen. Let's not jump to restricting things by default.

    Regards,

    Richard....

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.rutgers.edu
    Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html

    \
     
     \ /
      Last update: 2005-03-22 13:43    [W:0.024 / U:31.728 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site