[lkml]   [2002]   [Dec]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: capable open_port() check wrong for kmem

    On 10 Dec 2002 05:45:09 GMT, David Wagner wrote:

    >carbonated beverage wrote:

    >> I found that I can't open /dev/kmem O_RDONLY. The open_mem
    >>and open_kmem calls (open_port()) in drivers/char/mem.c checks for

    >> Is there a possibility of splitting that off into a read and
    >>write pair, i.e. CAP_SYS_RAWIO_WRITE, CAP_SYS_RAWIO_READ?

    >Read-only access to /dev/kmem is probably enough to get root access
    >(maybe you can snoop root's password, for instance). This would make
    >the power of the two capabilities roughly equivalent, so if this is true,
    >I'm not sure I understand the point of splitting them in two this way.

    Many capabilities can be leveraged into root access with sufficient
    cleverness. If this were considered a sufficient argument for merging
    capabilities, we'd have far fewer of them.


    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 13:31    [W:0.044 / U:245.496 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site