lkml.org 
[lkml]   [2000]   [Aug]   [31]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH] mtrr: s/suser/capable/

On Thu, 31 Aug 2000, Tigran Aivazian wrote:

> Actually, microcode driver checks CAP_SYS_RAWIO only on open() so it would
> allow access to the receiver of fd even he has no CAP_SYS_RAWIO
> privilege. Hmmm, maybe I should put it back into write() method, as Linus
> (or someone else) did at some point (and I removed it)...

Please don't put it back into write(). One of the powerful uses of passing
fds is across privilege boundaries. We don't want that to suddenly stop
working.

Look at it this way: if anyone passes a privileged fd, they either know
what they are doing, or get what they deserve.

Cheers
Chris

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 12:38    [W:0.084 / U:1.092 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site