Messages in this thread |  | | Date | Thu, 31 Aug 2000 13:24:22 +0100 (BST) | From | Chris Evans <> | Subject | Re: [PATCH] mtrr: s/suser/capable/ |
| |
On Thu, 31 Aug 2000, Matthew Kirkwood wrote:
> On Thu, 31 Aug 2000, Andi Kleen wrote: > > > > > Clearly? How do MTRR changes relate to rawio ? > > > > > > RAWIO is about hardware level access not Stephens O_DIRECT stuff > > > > So why is /proc/kcore access SYS_RAWIO then ? > > I kind of overloaded CAP_SYS_RAWIO to restrict access to bits > of arbitrary memory. Maybe this one should require CAP_PTRACE > and CAP_DAC_OVERRIDE instead.
Anything which could provide raw access to kernel memory needs CAP_SYS_RAWIO, so that both this capability (along with CAP_SYS_MODULE) can be revoked to useful effect.
I'm not sure about /proc/kcore (it looks to be read only), but /dev/mem and /dev/kmem are good examples.
Cheers Chris
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org Please read the FAQ at http://www.tux.org/lkml/
|  |