[lkml]   [2000]   [Aug]   [31]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCH] mtrr: s/suser/capable/

On Thu, 31 Aug 2000, Matthew Kirkwood wrote:

> On Thu, 31 Aug 2000, Andi Kleen wrote:
> > > > Clearly? How do MTRR changes relate to rawio ?
> > >
> > > RAWIO is about hardware level access not Stephens O_DIRECT stuff
> >
> > So why is /proc/kcore access SYS_RAWIO then ?
> I kind of overloaded CAP_SYS_RAWIO to restrict access to bits
> of arbitrary memory. Maybe this one should require CAP_PTRACE
> and CAP_DAC_OVERRIDE instead.

Anything which could provide raw access to kernel memory needs
CAP_SYS_RAWIO, so that both this capability (along with
CAP_SYS_MODULE) can be revoked to useful effect.

I'm not sure about /proc/kcore (it looks to be read only), but /dev/mem
and /dev/kmem are good examples.


To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 12:38    [W:0.079 / U:5.904 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site